Advantech SaaS Composer - SQL Injection - CVE-2025-52694

[Winz18]

PR Information

• Added CVE-2025-52694: Advantech WISE-IoTSuite/SaaS Composer is vulnerable to an unauthenticated SQL Injection vulnerability via the filename parameter: /displays/{filename}?org_id={integer}
• References:
  • https://www.cve.org/CVERecord?id=CVE-2025-52694
  • https://www.csa.gov.sg/alerts-and-advisories/alerts/alerts-al-2026-001
  • https://github.com/Winz18/CVE-2025-52694-POC

Template validation

• Validated with a host running a vulnerable version and/or configuration (True Positive)

Additional Details

Fofa Query: title="SaaS Composer"

• Template Validation: The template has been validated using nuclei -validate and passed successfully.
• Scan Result: Tested against a target environment. The injection was confirmed with a time delay of ~6 seconds as expected.

Screenshots: