CVE-2025-41678 — SQL Injection via POST Requests Allowing Configuration Database Manipulation

CVE-2025-41678

SQL Injection via POST Requests Allowing Configuration Database Manipulation PUBLISHED

Description (CNA)

A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL statement.

Affected (CNA)

Vendor / product	Versions
MB connect line / mbNET.mini	affected 0.0.0 before 2.3.3
Helmholz / REX 100	affected 0.0.0 before 2.3.3

CWE

CWE-89

References

https://certvde.com/de/advisories/VDE-2025-058

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://seclists.org/fulldisclosure/2025/Jul/38