CVE-2025-5404

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-5404
A vulnerability classified as problematic was found in chaitak-gorai Blogbook up to 92f5cf90f8a7e6566b576fe0952e14e1c6736513. This vulnerability affects unknown code of the file /search.php of the component GET Parameter Handler. The manipulation of the argument Search leads to denial of service. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

2.9 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:A/AC:M/Au:N/C:N/I:N/A:P

Exploitability : 5.5 / Impact : 2.9

Access Vector ADJACENT_NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
https://github.com/rllvusgnzm98/Report/blob/main/blogbook/BlogBook%20search.php%20search%20Parameter%20SQL%20Injection.md Exploit Third Party Advisory
https://vuldb.com/?ctiid.310744 Permissions Required VDB Entry
https://vuldb.com/?id.310744 Third Party Advisory VDB Entry
https://vuldb.com/?submit.582915 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:chaitak-gorai:blogbook:*:*:*:*:*:*:*:*
History

10 Nov 2025, 20:06

Type Values Removed Values Added
References () https://github.com/rllvusgnzm98/Report/blob/main/blogbook/BlogBook%20search.php%20search%20Parameter%20SQL%20Injection.md - () https://github.com/rllvusgnzm98/Report/blob/main/blogbook/BlogBook%20search.php%20search%20Parameter%20SQL%20Injection.md - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.310744 - () https://vuldb.com/?ctiid.310744 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.310744 - () https://vuldb.com/?id.310744 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.582915 - () https://vuldb.com/?submit.582915 - Third Party Advisory, VDB Entry
Summary
  • (es) Se encontró una vulnerabilidad clasificada como problemática en Chaitak-gorai Blogbook hasta la versión 92f5cf90f8a7e6566b576fe0952e14e1c6736513. Esta vulnerabilidad afecta al código desconocido del archivo /search.php del componente GET Parameter Handler. La manipulación del argumento "Search" provoca una denegación de servicio. Se ha hecho público el exploit y puede que sea utilizado. Este producto utiliza una versión continua para ofrecer una entrega continua. Por lo tanto, no se dispone de detalles de las versiones afectadas ni de las actualizaciones. Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió.
CPE cpe:2.3:a:chaitak-gorai:blogbook:*:*:*:*:*:*:*:*
First Time Chaitak-gorai
Chaitak-gorai blogbook

01 Jun 2025, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-01 17:15

Updated : 2025-11-10 20:06

NVD link : CVE-2025-5404

Mitre link : CVE-2025-5404

CVE.ORG link : CVE-2025-5404

JSON object : View

Products Affected

chaitak-gorai

  • blogbook
CWE
CWE-404

Improper Resource Shutdown or Release