A vulnerability, which was classified as critical, was found in Brilliance Golden Link Secondary System up to 20250424. Affected is an unknown function of the file /paraframework/queryTsDictionaryType.htm. The manipulation of the argument dictCn1 leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://github.com/eeeeeekkkkkkkk/POC/blob/main/%E9%BB%84%E9%87%91%E9%80%9A%E4%BA%8C%E7%BA%A7%E7%B3%BB%E7%BB%9F%E4%B8%89%E4%BB%A3%E7%AE%A1%E7%90%86%E7%AB%AF%E7%B3%BB%E7%BB%9FqueryTsDictionaryType%E6%8E%A5%E5%8F%A3%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5.md | Exploit |
| https://vuldb.com/?ctiid.307470 | Permissions Required VDB Entry |
| https://vuldb.com/?id.307470 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.564593 | Third Party Advisory VDB Entry |
Configurations
History
06 Nov 2025, 19:59
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Brilliance golden Link Secondary System
Brilliance |
|
| CPE | cpe:2.3:a:brilliance:golden_link_secondary_system:*:*:*:*:*:*:*:* | |
| References | () https://github.com/eeeeeekkkkkkkk/POC/blob/main/%E9%BB%84%E9%87%91%E9%80%9A%E4%BA%8C%E7%BA%A7%E7%B3%BB%E7%BB%9F%E4%B8%89%E4%BB%A3%E7%AE%A1%E7%90%86%E7%AB%AF%E7%B3%BB%E7%BB%9FqueryTsDictionaryType%E6%8E%A5%E5%8F%A3%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5.md - Exploit | |
| References | () https://vuldb.com/?ctiid.307470 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.307470 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.564593 - Third Party Advisory, VDB Entry |
Information
Published : 2025-05-06 12:15
Updated : 2025-11-06 19:59
NVD link : CVE-2025-4353
Mitre link : CVE-2025-4353
CVE.ORG link : CVE-2025-4353
JSON object : View
Products Affected
brilliance
- golden_link_secondary_system