CVE-2025-4568

SQL Injection in 2ClickPortal PUBLISHED

Description (CNA)

Improper neutralization of input provided by an unauthorized user into changes__reference_id parameter in URL allows for boolean-based Blind SQL Injection attacks.

Affected (CNA)

Vendor / product	Versions
Trol InterMedia / 2ClickPortal	affected 0 before 7.14.3

CWE

CWE-89

References

https://cert.pl/en/posts/2025/06/CVE-2025-4568
https://2clickportal.pl/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.