Description
company-financial-management是肯尼基蛙（Kenj_Frog）个人开发者的一个公司财务管理系统。 company-financial-management 1.0版本存在注入漏洞，该漏洞源于对参数sort的错误操作会导致SQL注入。
company-financial-management 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.knowsafe.com/ti/info/0/995153
https://nvd.nist.gov/vuln/detail/CVE-2025-3318
https://vulners.com/cvelist/CVELIST:CVE-2025-3318
https://vuldb.com/vuln/303517
https://access.redhat.com/security/cve/cve-2025-3318
https://cve.imfht.com/product/company-financial-management%20%E5%85%AC%E5%8F%B8%E8%B4%A2%E5%8A%A1%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F?lang=en
https://github.com/cisagov/vulnrichment/blob/develop/2025/3xxx/CVE-2025-3318.json