CVE-2025-55703

An error-based SQL injection vulnerability exists in the Sunbird Power IQ 9.2.0 API. The vulnerability is due to an outdated API endpoint that applied arrays without proper input validation. This can allow attackers to manipulate SQL queries. This has been addressed in Power IQ version 9.2.1, where the API call code was updated to ensure safe handling of input values.

• CWE-89

• https://pastebin.com/C6hVPpF4Third Party Advisory
• https://www.sunbirddcim.com/Product

Published

Dec 15, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-55697Heap-based buffer overflow in Azure Local allows an authoriz…7.8
• CVE-2025-55698Null pointer dereference in Windows DirectX allows an author…7.7
• CVE-2025-55699Exposure of sensitive information to an unauthorized actor i…5.5
• CVE-2025-5570The AI Engine plugin for WordPress is vulnerable to Stored C…5.4
• CVE-2025-55700Out-of-bounds read in Windows Routing and Remote Access Serv…4.3
• CVE-2025-55701Improper validation of specified type of input in Microsoft …7.8
• CVE-2025-55704Hidden functionality issue exists in multiple MFPs provided …6.9
• CVE-2025-55705This vulnerability occurs when the system permits multiple s…9.8
• CVE-2025-55706URL redirection to untrusted site ('Open Redirect') issue e…5.1
• CVE-2025-55707Incorrect Privilege Assignment vulnerability in WPXPO PostX …7.2
• CVE-2025-55708Improper Neutralization of Special Elements used in an SQL C…8.5
• CVE-2025-55709Improper Neutralization of Input During Web Page Generation …6.5