CVE-2025-65235

Critical

Published: 26/11/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 was discovered to contain a SQL injection vulnerability via the ID parameter in the getSubUsersByProvider function.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to user data or modify the database.

Recommendation

Update OpenCode Systems USSD Gateway to a version later than 6.13.11. Use parameterized SQL queries and input validation.

Original NVD description (English source)

OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 was discovered to contain a SQL injection vulnerability via the ID parameter in the getSubUsersByProvider function.