PT-2025-51283

CVE-2025-55703

·

Published

2025-12-15

·

Updated

2026-10-14

Description by

CVSS 3.1
3.3
Low
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Sunbird Power IQ versions prior to 9.2.1
Description An error-based SQL injection issue exists in the Power IQ API due to insufficient input validation when handling arrays in an outdated API endpoint. This allows manipulation of SQL queries.
Recommendations Update to Power IQ version 9.2.1 or later, which includes updated API call code for safe handling of input values.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')
Related identifiers
CVE-2025-55703
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com