{"id":"CVE-2025-50455","title":"SQL injection vulnerability exists in the order_by parameter of the /customers/search endpoint in Alex Tselegidis EasyAppointments <= 1.5.1","summary":"SQL injection vulnerability exists in the order_by parameter of the /customers/search endpoint in Alex Tselegidis EasyAppointments <= 1.5.1. The vulnerability arises from unsanitized user input passed to the order_by method of the CodeIg…","severity":"critical","cvss":9.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-89"],"published":"2026-07-27","updated":"2026-10-13","sourceUpdated":"2026-10-13T10:10:00.193","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-50455","references":[{"url":"https://github.com/threatlance-org/security-advisories/blob/main/CVE-2025-50455/advisory.md","label":"cve@mitre.org"},{"url":"https://github.com/threatlance-org/security-advisories/blob/main/CVE-2025-50455/poc.py","label":"cve@mitre.org"},{"url":"https://www.linkedin.com/posts/michael-chesang_cve-securityadvisory-appsec-activity-7360754900827365376-Z-IY","label":"cve@mitre.org"},{"url":"https://github.com/threatlance-org/security-advisories/blob/main/CVE-2025-50455/advisory.md","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","exploit-available"],"epss":0.01249,"epssPercentile":0.68558,"exploits":{"exploitdb":true,"checkedAt":"2026-10-13T10:22:37.869Z"},"exploitAvailable":true,"ingestedAt":"2026-10-13T10:22:03.549Z","slug":"CVE-2025-50455","body":"## Overview\n\nSQL injection vulnerability exists in the order_by parameter of the /customers/search endpoint in Alex Tselegidis EasyAppointments <= 1.5.1. The vulnerability arises from unsanitized user input passed to the order_by method of the CodeIgniter Query Builder, enabling attackers to perform time-based queries and schema enumeration. Under certain MySQL configurations, the flaw may lead to remote code execution by writing a PHP shell using INTO OUTFILE.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":62,"depthScoreParts":{"impact":50.1,"likelihood":0.2,"exploitation":12,"ransomware":0},"changes":[]}