CVE-2025-67406
Received Received - Intake

SQL Injection in Advocate Office Management System

Publication date: 2026-07-29

Last updated on: 2026-07-30

Assigner: MITRE

Description
https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code (remote). The component is: control/activate_case.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activate_case.php in parameter id endpoint of Advocate office management system. Unsanitized user input in the specified parameter is interpolated directly into an SQL query, allowing attackers to infer or extract data and, in some cases, execute stacked/time-based payloads. ¶¶ Affected Component & Parameter Affected Endpoint URL: http://localhost/advocate/kortex_lite/control/activate_case.php?id=1 HTTP Method: GET Vulnerable File: activate_case.php Parameter: id Vector Location: GET Injection Techniques (as identified by sqlmap) Type: error-based Title: MySQL >= 5.1 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (EXTRACTVALUE) Payload: id=1 AND EXTRACTVALUE(6268,CONCAT(0x5c,0x71766b6a71,(SELECT (ELT(6268=6268,1))),0x716a7a6b71)) Type: time-based blind Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP) Payload: id=1 AND (SELECT 4464 FROM (SELECT(SLEEP(5)))aHqo) Proof of Concept (Burp Repeater)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-29
Last Modified
2026-07-30
Generated
2026-08-19
AI Q&A
2026-07-30
EPSS Evaluated
2026-08-18
NVD
CVE-2025-67406

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-89 The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a SQL Injection vulnerability in the Advocate office management system 1.0. It allows attackers to inject malicious SQL code through the 'id' parameter in the activate_case.php endpoint. Unsanitized input is directly used in SQL queries, enabling attackers to extract data or execute arbitrary commands remotely.

Detection Guidance

To detect this SQL Injection vulnerability, use sqlmap with error-based or time-based techniques. Example commands: sqlmap -u "http://localhost/advocate/kortex_lite/control/activate_case.php?id=1" --batch --technique=E --dbms=mysql or sqlmap -u "http://localhost/advocate/kortex_lite/control/activate_case.php?id=1" --batch --technique=T --dbms=mysql

Manually test by sending GET requests with payloads like id=1 AND EXTRACTVALUE(6268,CONCAT(0x5c,0x71766b6a71,(SELECT (ELT(6268=6268,1))),0x716a7a6b71)) or id=1 AND (SELECT 4464 FROM (SELECT(SLEEP(5)))aHqo) and observe responses.

Impact Analysis

An attacker could exploit this to access, modify, or delete sensitive data in the database. They might also execute unauthorized commands on the server, leading to full system compromise. This could result in data breaches, loss of confidential information, or complete system takeover.

Compliance Impact

This vulnerability likely violates GDPR and HIPAA requirements for data protection and security. It could lead to unauthorized access to personal or health data, resulting in legal penalties, fines, and reputational damage for affected organizations.

Mitigation Strategies

Immediately patch the Advocate office management system to the latest version. Sanitize user input in the 'id' parameter using prepared statements or input validation. Disable error-based SQL Injection details in production environments to prevent data leakage.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-67406. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart