CVE-2025-32245

Name
CVE-2025-32245
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LambertGroup Apollo allows SQL Injection. This issue affects Apollo: from n/a through 3.6.3.
NVD Severity
high
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
vdb-entry https://patchstack.com/database/wordpress/plugin/lbg-audio7_html5_full_width_sticky_pro/vulnerability/wordpress-apollo-3-6-3-sql-injection-vulnerability?_s_id=cve

Match rules

CPE URI Source package Min version Max version
apollo >= n/a <= 3.6.3

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
apollo edge-community 0.3.1-r5 David Sugar <tychosoft@gmail.com> possibly vulnerable
apollo edge-community 0.3.1-r4 David Sugar <tychosoft@gmail.com> possibly vulnerable
apollo edge-community 0.3.1-r3 David Sugar <tychosoft@gmail.com> possibly vulnerable
apollo edge-community 0.3.1-r2 David Sugar <tychosoft@gmail.com> possibly vulnerable
apollo edge-community 0.3.1-r1 David Sugar <tychosoft@gmail.com> possibly vulnerable
apollo edge-community 0.3.1-r0 David Sugar <tychosoft@gmail.com> possibly vulnerable
apollo edge-community 0.3.0-r3 David Sugar <tychosoft@gmail.com> possibly vulnerable
apollo edge-community 0.3.0-r2 David Sugar <tychosoft@gmail.com> possibly vulnerable
apollo edge-community 0.3.0-r1 David Sugar <tychosoft@gmail.com> possibly vulnerable
apollo edge-community 0.3.0-r0 David Sugar <tychosoft@gmail.com> possibly vulnerable
apollo edge-community 0.2.3-r2 David Sugar <tychosoft@gmail.com> possibly vulnerable
apollo edge-community 0.2.3-r1 David Sugar <tychosoft@gmail.com> possibly vulnerable
apollo edge-community 0.2.3-r0 David Sugar <tychosoft@gmail.com> possibly vulnerable
apollo 3.22-community 0.3.0-r7 David Sugar <tychosoft@gmail.com> possibly vulnerable
apollo 3.22-community 0.3.0-r6 David Sugar <tychosoft@gmail.com> possibly vulnerable
apollo 3.22-community 0.3.0-r5 David Sugar <tychosoft@gmail.com> possibly vulnerable
apollo 3.22-community 0.3.0-r4 David Sugar <tychosoft@gmail.com> possibly vulnerable