Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1110 CNY

100%
Buy Us a Coffee

CVE-2025-28076

AI Predicted 8.1 Difficulty: Easy EPSS 0.18% · P39
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2025-28076

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.4 and CO2Scope <= 1.3.4 allows remote authenticated attackers to execute arbitrary SQL commands via the (1) timeago, (2) user, (3) filter, (4) target, (5) p1, (6) p2, (7) p3, (8) p4, (9) p5, (10) p6, (11) p7, (12) p8, (13) p9, (14) p10, (15) p11, (16) p12, (17) p13, (18) p14, (19) p15, (20) p16, (21) p17, (22) p18, (23) p19, or (24) p20 parameter to /api/management/updateihmsettings; the (25) ID, (26) NAME, (27) CPUTHREADNB, (28) RAMCAP, or (29) DISKCAP parameter to /api/capaplan/savetemplates.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
EasyVirt DC Scope和EasyVirt CO2 Scope SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
EasyVirt DC Scope和EasyVirt CO2 Scope都是法国EasyVirt公司的产品。EasyVirt DC Scope是一个适用于 VMware 虚拟化 VMware 的监控和管理解决方案。EasyVirt CO2 Scope是一种实时监控 IT 服务、虚拟机和服务器的 CO2 排放的解决方案。 EasyVirt DC Scope 8.6.4及之前版本和EasyVirt CO2 Scope 1.3.4及之前版本存在SQL注入漏洞，该漏洞源于多个参数存在SQL注入。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2025-28076

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-28076

请登录查看更多情报信息。

News Coverage for CVE-2025-28076 (1)

Other References for CVE-2025-28076 (1)

Same Patch Batch · n/a · 2025-04-25 · 12 CVEs total

CVE-2025-28354Entrust Printer Manager 路径遍历漏洞
CVE-2025-28128Mytel Telecom Online Account System 安全漏洞
CVE-2025-32986NetScout nGeniusONE 安全漏洞
CVE-2025-32981NetScout nGeniusONE 安全漏洞
CVE-2025-32982NetScout nGeniusONE 安全漏洞
CVE-2025-32983NetScout nGeniusONE 信息泄露漏洞
CVE-2025-32979NetScout nGeniusONE 安全漏洞
CVE-2025-32985NetScout nGeniusONE 安全漏洞
CVE-2025-32984NetScout nGeniusONE 跨站脚本漏洞
CVE-2025-32980NetScout nGeniusONE 安全漏洞
CVE-2025-25775CodeAstro Bus Ticket Booking System SQL注入漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2025-28076

No comments yet

Leave a comment