# CVEs published 2025-03-09

24 CVEs were published on March 9, 2025: 0 critical, 0 high. Days are UTC.

- [CVE-2025-2133](https://cve.now/CVE-2025-2133.md): ftcms edit cross site scripting (CVSS 4.8, ftcms)
- [CVE-2025-2132](https://cve.now/CVE-2025-2132.md): ftcms Search ajax\_all\_lists sql injection (CVSS 5.1, ftcms)
- [CVE-2025-2131](https://cve.now/CVE-2025-2131.md): dayrui XunRuiCMS Friendly Links cross site scripting (CVSS 4.8, dayrui XunRuiCMS)
- [CVE-2025-2130](https://cve.now/CVE-2025-2130.md): OpenXE Ticket Bearbeiten Page cross site scripting (CVSS 5.1, OpenXE)
- [CVE-2025-2129](https://cve.now/CVE-2025-2129.md): Mage AI insecure default initialization of resource (CVSS 6.3, Mage AI)
- [CVE-2025-2127](https://cve.now/CVE-2025-2127.md): JoomlaUX JUX Real Estate realties cross site scripting (CVSS 5.3, JoomlaUX JUX Real Estate)
- [CVE-2025-2126](https://cve.now/CVE-2025-2126.md): JoomlaUX JUX Real Estate GET Parameter realties sql injection (CVSS 5.3, JoomlaUX JUX Real Estate)
- [CVE-2025-2125](https://cve.now/CVE-2025-2125.md): Control iD RH iD PDF Document companyId resource injection (CVSS 5.3, Control iD RH iD)
- [CVE-2025-2124](https://cve.now/CVE-2025-2124.md): Control iD RH iD API change\_password cross site scripting (CVSS 5.1, Control iD RH iD)
- [CVE-2025-2123](https://cve.now/CVE-2025-2123.md): GeSHi CSS cssgen.php get\_var cross site scripting (CVSS 5.1, GeSHi · geshi/geshi)
- [CVE-2025-2122](https://cve.now/CVE-2025-2122.md): Thinkware Car Dashcam F800 Pro Connection denial of service (CVSS 2.3, Thinkware Car Dashcam F800 Pro)
- [CVE-2025-27636](https://cve.now/CVE-2025-27636.md): Apache Camel: Camel Message Header Injection via Improper Filtering (CVSS 5.6, Apache Software Foundation Apache Camel · org.apache.camel:…)
- [CVE-2025-2121](https://cve.now/CVE-2025-2121.md): Thinkware Car Dashcam F800 Pro File Storage access control (CVSS 5.3, Thinkware Car Dashcam F800 Pro)
- [CVE-2025-2120](https://cve.now/CVE-2025-2120.md): Thinkware Car Dashcam F800 Pro Configuration File hostapd.conf cleartext storage in a file or on disk (CVSS 2.4, Thinkware Car Dashcam F800 Pro)
- [CVE-2025-2119](https://cve.now/CVE-2025-2119.md): Thinkware Car Dashcam F800 Pro Device Registration default credentials (CVSS 1.0, Thinkware Car Dashcam F800 Pro)
- [CVE-2025-2118](https://cve.now/CVE-2025-2118.md): Quantico Tecnologia PRMV Login Endpoint login.php sql injection (CVSS 6.9, Quantico Tecnologia PRMV)
- [CVE-2025-2117](https://cve.now/CVE-2025-2117.md): Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System reportCenter.do electricDocList sql injection (CVSS 5.3, Beijing Founder Electronics Founder Enjoys All-Media Acquis…)
- [CVE-2025-2116](https://cve.now/CVE-2025-2116.md): Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System File Protocol imageProxy.do server-side request forgery (CVSS 5.3, Beijing Founder Electronics Founder Enjoys All-Media Acquis…)
- [CVE-2025-1382](https://cve.now/CVE-2025-1382.md): Contact Us By Lord Linus \<= 2.6 - Admin+ Stored XSS via CSRF (CVSS 6.1, Contact Us By Lord Linus)
- [CVE-2025-1363](https://cve.now/CVE-2025-1363.md): easy-broken-link-checker \<= 9.0.2 - Admin+ Stored XSS (CVSS 3.5, URL Shortener | Conversion Tracking | AB Testing | WooCom…)
- [CVE-2025-1362](https://cve.now/CVE-2025-1362.md): easy-broken-link-checker \<= 9.0.2 - Bulk Actions via CSRF (CVSS 4.3, URL Shortener | Conversion Tracking | AB Testing | WooCom…)
- [CVE-2025-2115](https://cve.now/CVE-2025-2115.md): zzskzy Warehouse Refinement Management System AcceptZip.ashx ProcessRequest unrestricted upload (CVSS 5.3, zzskzy Warehouse Refinement Management System)
- [CVE-2025-2114](https://cve.now/CVE-2025-2114.md): Shenzhen Sixun Software Sixun Shanghui Group Business Management System Reset Password Interface OperatorStop.asp improper authorization (CVSS 6.3, Shenzhen Sixun Software Sixun Shanghui Group Business Manag…)
- [CVE-2025-2113](https://cve.now/CVE-2025-2113.md): AT Software Solutions ATSVD Esqueceu a senha sql injection (CVSS 6.9, AT Software Solutions ATSVD)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-03-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.