CVE-2025-29529

MEDIUM

ITC Systems Multiplan/Matrix OneCard <3.7.4.1002 - SQL Injection

Title source: llm

Description

ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx.

Exploits (1)

nomisec WRITEUP

by Yoshik0xF6 · poc

https://github.com/Yoshik0xF6/CVE-2025-29529

View Code ZIP pw:eip

References (2)

[Various Sources] https://github.com/Yoshik0xF6/CVE-2025-29529

[Patch] https://github.com/chamilo/chamilo-lms/commit/beb07770d674fcc9db6df0e59aab107678c28682

Scores

CVSS v3 6.5

EPSS 0.0024

EPSS Percentile 47.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-89

Status published

Published Apr 24, 2025

Tracked Since Feb 18, 2026