CVE-2025-58462
OPEXUS FOIAXpress PAL SQL injection
OPEXUS FOIAXpress Public Access Link (PAL) before version 11.13.1.0 allows SQL injection via SearchPopularDocs.aspx. A remote, unauthenticated attacker could read, write, or delete any content in the underlying database.
CVSS 4.0 · 9.3 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products