Youdatasum vulnerabilities
Published CVEs affecting Youdatasum products: 1 record(s), with severity, exploitation and fixes.
CVE-2025-57529
Critical · 9.8
CWE-89 Feb 3, 2026
YouDataSum CPAS Audit Management System SQL Injection (CVE-2025-57529)
YouDataSum CPAS Audit Management System <=v4.9 is vulnerable to SQL Injection in /cpasList/findArchiveReportByDah due to insufficient input validation. This allows remote unauthenticated attackers to execute arbitrary SQL commands via crafted input to the parameter. Successful exploitation could lead to unauthorized data access