critical9.8
CVE-2025-58462
OPEXUS FOIAXpress Public Access Link (PAL) before version 11.13.1.0 allows SQL injection via SearchPopularDocs.aspx.
Impact
OPEXUS FOIAXpress Public Access Link (PAL) before version 11.13.1.0 allows SQL injection via SearchPopularDocs.aspx. A remote, unauthenticated attacker could read, write, or delete any content in the underlying database.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opexustech | Foiaxpress Public Access Link | before 11.13.1.0 |