{"id":"CVE-2025-55885","title":"SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.php","summary":"SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.php","severity":"medium","cvss":6.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-89"],"vendor":"ard","product":"gec_en_ligne","affected":["gec_en_ligne < 2025-04-23"],"patched":["gec_en_ligne 2025-04-23"],"published":"2025-09-22","updated":"2026-07-05","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-55885","references":[{"url":"https://github.com/0xZeroSec/CVE-2025-55885","label":"cve@mitre.org"},{"url":"https://services.ard.fr/index.php","label":"cve@mitre.org"}],"tags":["nvd","exploit-available"],"epss":0.00357,"epssPercentile":0.29547,"ingestedAt":"2026-07-06T16:44:34.260Z","exploits":{"github":1,"githubRepos":["https://github.com/0xZeroSec/CVE-2025-55885"],"checkedAt":"2026-09-24T07:52:53.654Z"},"exploitAvailable":true,"slug":"CVE-2025-55885","body":"## Overview\n\nSQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.php\n\n## Affected\n\n- `gec_en_ligne < 2025-04-23`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `gec_en_ligne 2025-04-23`","depth":"twilight","depthScore":47,"depthScoreParts":{"impact":34.7,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":4835,"id":"CVE-2025-55885","ts":1788887210058,"field":"exploit_available","old":"false","new":"true"},{"seq":3718,"id":"CVE-2025-55885","ts":1788886327226,"field":"exploit_available","old":"true","new":"false"},{"seq":2563,"id":"CVE-2025-55885","ts":1788883008626,"field":"exploit_available","old":"false","new":"true"},{"seq":1592,"id":"CVE-2025-55885","ts":1788882408749,"field":"exploit_available","old":"true","new":"false"},{"seq":704,"id":"CVE-2025-55885","ts":1788881846145,"field":"exploit_available","old":"false","new":"true"}]}