CVE-2025-12248

A security vulnerability has been detected in CLTPHP 3.0. The affected element is an unknown function of the file /home/search.html. Such manipulation of the argument keyword leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

• CWE-74
• CWE-89

• https://github.com/1276486/CVE/issues/17
• https://vuldb.com/?ctiid.329919
• https://vuldb.com/?id.329919
• https://vuldb.com/?submit.674880

Published

Oct 27, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-12242A vulnerability has been found in CodeAstro Gym Management S…8.8
• CVE-2025-12243A vulnerability was found in code-projects Client Details Sy…8.8
• CVE-2025-12244A vulnerability was determined in code-projects Simple E-Ban…6.1
• CVE-2025-12245A vulnerability was identified in chatwoot up to 4.7.0. This…5.3
• CVE-2025-12246A security flaw has been discovered in chatwoot up to 4.7.0.…6.1
• CVE-2025-12247A weakness has been identified in Hasleo Backup Suite up to …7
• CVE-2025-12249A vulnerability was detected in Axosoft Scrum and Bug Tracki…6.3
• CVE-2025-1225A vulnerability, which was classified as problematic, has be…6.3
• CVE-2025-12250A flaw has been found in OpenWGA 7.11.12 Build 737. This aff…4.7
• CVE-2025-12251A vulnerability has been found in OpenWGA 7.11.12 Build 737.…3.5
• CVE-2025-12252A vulnerability was found in code-projects Online Event Judg…8.8
• CVE-2025-12253A vulnerability was determined in AMTT Hotel Broadband Opera…9.8