（CVE-2025-15011）Simple Stock System 1.0 logout.php SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-15011
• https://www.cve.org/CVERecord?id=CVE-2025-15011
• https://vuldb.com/?id.337717
• https://www.cisa.gov/news-events/bulletins/sb25-363
• https://access.redhat.com/security/cve/cve-2025-15011
• https://cve.imfht.com/detail/CVE-2025-15011?lang=en
• https://mondoo.com/vulnerability-intelligence/vulnerability/CVE-2025-15011
• https://github.com/advisories/GHSA-6mcx-64mw-m32r

Related Vulnerabilities

• PoCCVE-2024-57728: SimpleHelp <= 5.5.7 - Arbitrary File Upload
• PoCCVE-2026-48558: SimpleHelp <=5.5.15 - OIDC JWT Authentication Bypass
• 中成科信票务管理系统 /SystemManager/TicketSystem/ReturnTicketPlance.ashx SQL 注入漏洞
• 中成科信票务管理系统 /SystemManager/Planetarium/ReserveTicketManagerPlane.ashx SQL 注入漏洞
• PoCCVE-2026-3576: Planyo Online Reservation System <= 3.0 - Arbitrary File Read
• PoCCVE-2024-57726: SimpleHelp <= 5.5.7 - Privilege Escalation
• PoCsimple-file-list-rce: WordPress Simple File List <=4.2.2 - Remote Code Execution
• 深信服运维安全管理系统 /fort/system/safeCert;help/upload_safe_cert 命令执行漏洞
• PoCzoneminder-system-log: ZoneMinder System Log - Detect
• 用友U8cloud /u8cloud/extsystem/dst SQL 注入漏洞
• 天锐绿盾审批系统 /trwfe/login.jsp/..;/thirdSystemConfig/findSingConfigPage.do SQL 注入漏洞
• 关于U8cloud2.6-5.1sp版本extsystem.dst接口存在SQL注入漏洞的安全公告
• FOSSBilling /system/string_render 命令执行漏洞（CVE-2026-28496）