How severe is CVE-2025-0214?

This vulnerability has a severity rating of LOW with a CVSS score of 4.1 out of 10.

What type of vulnerability is CVE-2025-0214?

This is classified as CWE-74, which is a common weakness in software security.

CVE-2025-0214 - LOW Severity | CVSS 4.1

Vulnerability Description

A vulnerability was found in TMD Custom Header Menu 4.0.0.1 on OpenCart. It has been rated as problematic. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument headermenu_id leads to sql injection. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.

Related Vulnerabilities

CVE-2020-4851

MEDIUM

CVSS:4.0(Medium)

IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190450.

CWE-742020

CVE-2017-5246

MEDIUM

CVSS:4.3(Medium)

Biscom Secure File Transfer is vulnerable to AngularJS expression injection in the Display Name field. An authenticated user can populate this field with a valid AngularJS expression, wrapped in doubl...

CWE-742017

CVE-2018-1000193

MEDIUM

CVSS:4.3(Medium)

A improper neutralization of control sequences vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in HudsonPrivateSecurityRealm.java that allows users to sign up using user names c...

CWE-742018

CVE-2018-20898

MEDIUM

CVSS:4.3(Medium)

cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation (SEC-396).

CWE-742018

CVE-2019-1680

MEDIUM

CVSS:4.3(Medium)

A vulnerability in Cisco Webex Business Suite could allow an unauthenticated, remote attacker to inject arbitrary text into a user's browser. The vulnerability is due to improper validation of input. ...

CWE-742019

CVE-2019-5977

MEDIUM

CVSS:4.3(Medium)

Mail header injection vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 may allow a remote authenticated attackers to alter mail header via the application 'E-Mail'.

CWE-742019