CVE-2025-0490

A vulnerability, which was classified as critical, has been found in Fanli2012 native-php-cms 1.0. This issue affects some unknown processing of the file /fladmin/article_dodel.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

• CWE-74
• CWE-89

• https://github.com/Fanli2012/native-php-cms/issues/12Exploit, Issue Tracking, Vendor Advisory
• https://github.com/Fanli2012/native-php-cms/issues/12#issue-2770013163Exploit, Issue Tracking, Vendor Advisory
• https://vuldb.com/?ctiid.291935Permissions Required, VDB Entry
• https://vuldb.com/?id.291935Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.475258Third Party Advisory, VDB Entry
• https://github.com/Fanli2012/native-php-cms/issues/12Exploit, Issue Tracking, Vendor Advisory
• https://github.com/Fanli2012/native-php-cms/issues/12#issue-2770013163Exploit, Issue Tracking, Vendor Advisory

Published

Jan 15, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-0484A vulnerability was found in Fanli2012 native-php-cms 1.0 an…7.5
• CVE-2025-0485A vulnerability was found in Fanli2012 native-php-cms 1.0. I…6.1
• CVE-2025-0486A vulnerability was found in Fanli2012 native-php-cms 1.0. I…9.8
• CVE-2025-0487A vulnerability was found in Fanli2012 native-php-cms 1.0. I…9.8
• CVE-2025-0488A vulnerability classified as critical has been found in Fan…8.8
• CVE-2025-0489A vulnerability classified as critical was found in Fanli201…8.8
• CVE-2025-0491A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-0492A vulnerability has been found in D-Link DIR-823X 240126/240…8.7
• CVE-2025-0493The MultiVendorX – The Ultimate WooCommerce Multivendor Mark…9.8
• CVE-2025-0495Buildx is a Docker CLI plugin that extends build capabilitie…4.1
• CVE-2025-0497A data exposure vulnerability exists in all versions prior t…9.8
• CVE-2025-0498A data exposure vulnerability exists in all versions prior t…9.8