CVE-2025-3893
published 2025-05-23CVE-2025-3893: While editing pages managed by MegaBIP a user with high privileges is prompted to give a reasoning for performing this action. Input provided by the the user…
PriorityP345high8.6CVSS 4.0
AVNACLATNPRHUINVCHVIHVAHSCNSINSANEXCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUXRXVXREXUX
EPSS
0.33%
24.7th percentile
While editing pages managed by MegaBIP a user with high privileges is prompted to give a reasoning for performing this action. Input provided by the the user is not sanitized, leading to SQL Injection vulnerability.
Version 5.20 of MegaBIP fixes this issue.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| jan_syski | megabip | <= 5.19 | — |
CVSS provenance
nvdv4.08.6HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
cisa8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-9vwh-vqcj-qvf3: While editing pages managed by MegaBIP a user with high privileges is prompted to give a reasoning for performing this action
ghsa_unreviewed·2025-05-23
CVE-2025-3893 [HIGH] CWE-89 GHSA-9vwh-vqcj-qvf3: While editing pages managed by MegaBIP a user with high privileges is prompted to give a reasoning for performing this action
While editing pages managed by MegaBIP a user with high privileges is prompted to give a reasoning for performing this action. Input provided by the the user is not sanitized, leading to SQL Injection vulnerability.
Version 5.20 of MegaBIP fixes this issue.
CISA
Microsoft Internet Explorer Resource Management Errors Vulnerability
cisa·2025-08-12·CVSS 8.8
CVE-2013-3893 [HIGH] CWE-399 Microsoft Internet Explorer Resource Management Errors Vulnerability
Vulnerability: Microsoft Internet Explorer Resource Management Errors Vulnerability
Affected: Microsoft Internet Explorer
Microsoft Internet Explorer contains a memory corruption vulnerability that allows for remote code execution. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Notes: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-080 ; https://nvd.nist.gov/vuln/detail/CVE-2013-3893
Remediation Due Date: 2025-09-02
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-05-23
Published