CVE-2025-64280

Critical

Published: 12/11/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

CentralSquare Community Development version 19.5.7 has a SQL Injection vulnerability that allows attackers to inject SQL via the permit_no field.

Attackers can manipulate the database, gain unauthorized access to data, or perform attacks on data integrity.

Upgrade to a patched version and use parameterized queries to prevent SQL injection.

Original NVD description (English source)

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permit_no field.