CVE-2025-64280

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permit_no field.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@mitre.org

Published

2025-11-12

Last modified

2025-11-13

Weaknesses

CWE-89

Affected products

• Community Development (Centralsquare)

References

• https://centralsquare.com
• https://machevalia.blog/blog/multiple-vulnerabilities-in-centralsquare-etrakit-and-ivr