CVE-2025-58462 — OPEXUS FOIAXpress PAL SQL injection
OPEXUS FOIAXpress Public Access Link (PAL) before version 11.13.1.0 allows SQL injection via SearchPopularDocs.aspx. A remote, unauthenticated attacker could read, write, or del…
Published: 2025-09-09 · CVSS: 9.3 · CVSS 4.0
OPEXUS FOIAXpress Public Access Link (PAL) before version 11.13.1.0 allows SQL injection via SearchPopularDocs.aspx. A remote, unauthenticated attacker could read, write, or delete any content in the underlying database.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7