critical9.8
CVE-2025-57631
SQL Injection vulnerability in TDuckCloud v.5.1 allows a remote attacker to execute arbitrary code via the Add a file upload module
Impact
SQL Injection vulnerability in TDuckCloud v.5.1 allows a remote attacker to execute arbitrary code via the Add a file upload module
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tduckcloud | Tduck | Version 5.1 |