CVE-2025-65236

Critical

Published: 26/11/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

OpenCode Systems USSD Gateway OC Release: 5 was discovered to contain a SQL injection vulnerability via the Session ID parameter in the /occontrolpanel/index.php endpoint.

Risk Assessment

An attacker could exploit this vulnerability to manipulate the database, potentially leading to data disclosure, modification, or deletion.

Recommendation

Update OpenCode Systems USSD Gateway to the latest version. Use parameterized SQL queries and input validation.

Original NVD description (English source)

OpenCode Systems USSD Gateway OC Release: 5 was discovered to contain a SQL injection vulnerability via the Session ID parameter in the /occontrolpanel/index.php endpoint.