CVE-2025-55885

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-55885
SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.php

6.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
http://alpes.com Broken Link
http://ard.com Broken Link
https://github.com/0xZeroSec/CVE-2025-55885 Exploit Third Party Advisory
https://services.ard.fr/index.php Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:ard:gec_en_ligne:*:*:*:*:*:*:*:*
History

14 Oct 2025, 19:52

Type Values Removed Values Added
References () http://alpes.com - () http://alpes.com - Broken Link
References () http://ard.com - () http://ard.com - Broken Link
References () https://github.com/0xZeroSec/CVE-2025-55885 - () https://github.com/0xZeroSec/CVE-2025-55885 - Exploit, Third Party Advisory
References () https://services.ard.fr/index.php - () https://services.ard.fr/index.php - Product
First Time Ard gec En Ligne
Ard
CPE cpe:2.3:a:ard:gec_en_ligne:*:*:*:*:*:*:*:*

22 Sep 2025, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-09-22 18:15

Updated : 2025-10-14 19:52

NVD link : CVE-2025-55885

Mitre link : CVE-2025-55885

CVE.ORG link : CVE-2025-55885

JSON object : View

Products Affected

ard

  • gec_en_ligne
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')