cvedb.io
CVE-2025-57529
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2026-02-03T18:16:13.403 · Last modified 2026-06-17T09:43:10.760

Summary

YouDataSum CPAS Audit Management System <=v4.9 is vulnerable to SQL Injection in /cpasList/findArchiveReportByDah due to insufficient input validation. This allows remote unauthenticated attackers to execute arbitrary SQL commands via crafted input to the parameter. Successful exploitation could lead to unauthorized data access

Affected products

youdatasum — cpas_audit_management_system

Does this affect you?

Add your gear to cvedb and we'll alert you only when youdatasum ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.