What is CVE-2025-10351?

CVE-2025-10351 is a vulnerability in Melis Technology Platform, classified under SQL Injection. Published 2025-10-08.

Is CVE-2025-10351 known to be exploited?

4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

SQL Injection in Melis Technology Platform

CVE-2025-10351

SQL injection vulnerability based on the melis-cms module of the Melis platform from Melis Technology. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'idPage' parameter in the '/melis/MelisCms/PageEdition/getTinyTemplates' endpoint.

Vulnerability class: SQL Injection

EPSS: 0.004 (31.2th percentile) — read the EPSS interpretation.

Affected products

Melis Technology Platform — versions 0

Weakness classification (CWE)

CWE-89 — SQL Injection

Public proof-of-concept exploits

ivansmc/CVE-2025-10351-POC
ivansmc00/CVE-2025-10351
ivansmc00/CVE-2025-10351-POC
nomi-sec/PoC-in-GitHub

References

cve-coordination@incibe.es
cve-coordination@incibe.es (exploit)

Frequently asked questions

What is CVE-2025-10351?: CVE-2025-10351 is a vulnerability in Melis Technology Platform, classified under SQL Injection. Published 2025-10-08.
Is CVE-2025-10351 known to be exploited?: 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.