PT-2025-14916 · Unknown · Eleopard Behance Portfolio Manager

·

CVE-2025-32124

·

Published

2025-04-04

·

Updated

2025-04-06

CVSS v3.1

7.6

High

VectorAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
Name of the Vulnerable Software and Affected Versions eleopard Behance Portfolio Manager versions 1.7.4 and earlier
Description The issue is related to an SQL Injection vulnerability, specifically Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL Injection, which can be exploited.
Recommendations For versions 1.7.4 and earlier, update to a version that contains a fix for this issue, if available. As a temporary workaround, consider restricting access to sensitive database queries to minimize the risk of exploitation. Avoid using user-supplied input in SQL commands until the issue is resolved.

Fix

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-32124

Affected Products

Eleopard Behance Portfolio Manager