CVE-2025-8924
HIGHCampcodes Online Water Billing System 1.0 - SQL Injection via /viewbill.php ID Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2025-8924. PoCs published by encrypter15.
AI-analyzed exploit summary The repository contains a functional proof-of-concept exploit for CVE-2025-8924, a zero-click RCE vulnerability in Android 15's NFC NDEF parser. The exploit leverages an integer overflow in the `String8` allocator via an oversized URI record, leading to arbitrary code execution in the system_server context.
Description
A vulnerability was identified in Campcodes Online Water Billing System 1.0. This issue affects some unknown processing of the file /viewbill.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Exploits (1)
The repository contains a functional proof-of-concept exploit for CVE-2025-8924, a zero-click RCE vulnerability in Android 15's NFC NDEF parser. The exploit leverages an integer overflow in the `String8` allocator via an oversized URI record, leading to arbitrary code execution in the system_server context.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L