CVE-2025-5403

A vulnerability classified as critical has been found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. This affects an unknown part of the file /admin/view_all_posts.php of the component GET Parameter Handler. The manipulation of the argument post_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-74
• CWE-89
• CWE-89

• https://github.com/rllvusgnzm98/Report/blob/main/blogbook/BlogBook%20posts.php%20delete_post%20delete%20Parameter%20SQL%20Injection.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.310743Permissions Required, VDB Entry
• https://vuldb.com/?id.310743Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.582910Third Party Advisory, VDB Entry

Published

Jun 1, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-54024Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2025-54025Missing Authorization vulnerability in Elliot Sowersby / Rel…6.5
• CVE-2025-54026Improper Neutralization of Special Elements used in an SQL C…8.5
• CVE-2025-54027Improper Neutralization of Input During Web Page Generation …7.1
• CVE-2025-54028Improper Control of Filename for Include/Require Statement i…7.5
• CVE-2025-54029Improper Limitation of a Pathname to a Restricted Directory …7.7
• CVE-2025-54030Cross-Site Request Forgery (CSRF) vulnerability in WesternDe…4.3
• CVE-2025-54031Improper Control of Filename for Include/Require Statement i…8.1
• CVE-2025-54032Improper Neutralization of Input During Web Page Generation …7.1
• CVE-2025-54033Cross-Site Request Forgery (CSRF) vulnerability in BlocksWP …6.5
• CVE-2025-54034Improper Control of Filename for Include/Require Statement i…7.5
• CVE-2025-54035Cross-Site Request Forgery (CSRF) vulnerability in Tribulant…4.3