A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected by this issue is some unknown functionality of the file /admin/editsite.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://gitee.com/sun-huizhi/dazhi/issues/IDBDAY | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.338549 | Permissions Required VDB Entry |
| https://vuldb.com/?id.338549 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.708845 | Third Party Advisory VDB Entry |
Configurations
History
02 Jan 2026, 15:51
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:biggidroid:simple_php_cms:1.0:*:*:*:*:*:*:* | |
| First Time |
Biggidroid
Biggidroid simple Php Cms |
|
| References | () https://gitee.com/sun-huizhi/dazhi/issues/IDBDAY - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.338549 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.338549 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.708845 - Third Party Advisory, VDB Entry |
29 Dec 2025, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-29 04:15
Updated : 2026-01-02 15:51
NVD link : CVE-2025-15169
Mitre link : CVE-2025-15169
CVE.ORG link : CVE-2025-15169
JSON object : View
Products Affected
biggidroid
- simple_php_cms