Critical severity9.8NVD Advisory· Published Feb 3, 2026· Updated Jun 17, 2026
CVE-2025-57529
CVE-2025-57529
Description
YouDataSum CPAS Audit Management System <=v4.9 is vulnerable to SQL Injection in /cpasList/findArchiveReportByDah due to insufficient input validation. This allows remote unauthenticated attackers to execute arbitrary SQL commands via crafted input to the parameter. Successful exploitation could lead to unauthorized data access
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<=v4.9+ 2 more
- (no CPE)range: <=v4.9
- cpe:2.3:a:youdatasum:cpas_audit_management_system:*:*:*:*:*:*:*:*range: <=4.9
- (no CPE)
Patches
Vulnerability mechanics
References
1- github.com/songqb-xx/CVE-2025-57529/blob/main/README.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.