ZeroDay Findings
Sign inSign up

Findings

CVE-2025-14245

A vulnerability has been found in IdeaCMS up to 1.8.

Published Dec 8, 2025 · updated Oct 15, 2026 · ideacms ideacms

A vulnerability has been found in IdeaCMS up to 1.8. This affects the function whereRaw of the file app/common/logic/index/Coupon.php. Such manipulation of the argument params leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 8, 2025 · NIST NVD

    Detected

    A vulnerability has been found in IdeaCMS up to 1.8. This affects the function whereRaw of the file app/common/logic/index/Coupon.php. Such manipulation of the argument params leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

  2. Oct 15, 2026 · NIST NVD

    Updated

    A vulnerability has been found in IdeaCMS up to 1.8. This affects the function whereRaw of the file app/common/logic/index/Coupon.php. Such manipulation of the argument params leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected

  • cpe ideacms/ideacmsversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2025-14245

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2025-14245

    A vulnerability has been found in IdeaCMS up to 1.8. This affects the function whereRaw of the file app/common/logic/index/Coupon.php. Such manipulation of the argument params leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the publi

    nvd.nist.gov

References