(CVE-2025-7605) AVL Rooms 1.0 profile.php文件SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.cve.org/CVERecord?id=CVE-2025-7605
• https://www.cvedetails.com/cve/CVE-2025-7605/
• https://github.com/sunhuiHi666/CVE-2025-7605
• https://cve.imfht.com/detail/CVE-2025-7605?lang=en
• https://dbugs.ptsecurity.com/vulnerability/PT-2025-29463
• https://cert.kenet.or.ke/cve-2025-7605-avl-rooms-sql-injection-vulnerability
• https://vuldb.com/?id.316304
• https://vulmon.com/searchpage?q=avl%20rooms

Related Vulnerabilities

• PoCCVE-2026-15826: User Profile Builder 3.16.4 - Unauthenticated Authentication Bypass
• WP User Manager /profile/admin/about 文件包含漏洞（CVE-2026-9290）
• WordPress ProfileGrid /wp-admin/admin-ajax.php SQL 注入漏洞（CVE-2024-30490）
• PoCCVE-2026-9290: WP User Manager – User Profile Builder & Membership - Local File Inclusion
• WP User Manager /profile/admin/about 本地文件包含漏洞
• Symfony /_profiler/phpinfo 信息泄露漏洞（CVE-2024-50340）
• Langflow /api/v1/files/profile_pictures/../secret_key 文件读取漏洞（CVE-2026-33497）
• 天地伟业Easy7 getCurrentUserInquestRooms_ZHGL SQL注入漏洞
• PoCCVE-2024-30490: ProfileGrid <= 5.7.8 - SQL Injection
• PoCumbraco-miniprofiler-exposure: Umbraco Mini Profiler - Exposure
• mJobtime /Default.aspx/update_profile_Server 命令执行漏洞（CVE-2025-51683）
• 天地伟业 /Easy7/rest/inquestRoom/getCurrentUserInquestRooms_ZHGL SQL 注入漏洞