Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-6835 State: PUBLISHED Published: 2025-06-29T00:00:18.720Z Last Updated: 2025-06-30T20:16:26.729Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Library System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student-issue-book.php. The manipulation of the argument reg leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314
o the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314279 - https://vuldb.com/?ctiid.314279 - https://vuldb.com/?submit.603142 - https://github.com/blueandhack/cve/issues/6 - https://code-projects.org/
CVE ID: CVE-2025-6836 State: PUBLISHED Published: 2025-06-29T00:31:05.242Z Last Updated: 2025-06-30T20:15:43.943Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Library System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in code-projects Library System 1.0. Affected is an unknown function of the file /profile.php. The manipulation of the argument phone leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References
d may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314280 - https://vuldb.com/?ctiid.314280 - https://vuldb.com/?submit.603145 - https://github.com/blueandhack/cve/issues/4 - https://code-projects.org/
CVE ID: CVE-2025-6837 State: PUBLISHED Published: 2025-06-29T01:00:20.433Z Last Updated: 2025-06-30T20:15:02.943Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Library System Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical was found in code-projects Library System 1.0. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument image leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
osed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314281 - https://vuldb.com/?ctiid.314281 - https://vuldb.com/?submit.603154 - https://github.com/blueandhack/cve/issues/7 - https://code-projects.org/
CVE ID: CVE-2025-6838 State: PUBLISHED Published: 2025-07-11T08:22:23.583Z Last Updated: 2025-07-11T15:25:30.576Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: apos37 Products: Broken Link Notifier Problem Types: CWE-1236 Description: The Broken Link Notifier plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 1.3.0 via broken links that are later exported. This makes it possible for authenticated attackers, with Contributor-level access and above, to embed untrusted input into exported CSV files, which can result in code execution when these files are downloaded and opened on a local system with a vulnerable configura
ch can result in code execution when these files are downloaded and opened on a local system with a vulnerable configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cd96beee-afcb-4439-ad9b-f24e8afeac3c?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3323864%40broken-link-notifier&new=3323864%40broken-link-notifier&sfp_email=&sfph_mail=
CVE ID: CVE-2025-6839 State: PUBLISHED Published: 2025-06-29T01:31:08.475Z Last Updated: 2025-06-30T20:14:14.689Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:W/RC:UR) Vendors: Conjure Products: Position Department Service Quality Evaluation System Problem Types: CWE-912 Description: A vulnerability, which was classified as critical, has been found in Conjure Position Department Service Quality Evaluation System up to 1.0.11. Affected by this issue is the function eval of the file public/assets/less/bootstrap-less/mixins/head.php. The manipulation of the argument payload leads to backdoor. The attack may be launched remotely. The exploit has been disclosed to the public and ma
ment payload leads to backdoor. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314282 - https://vuldb.com/?ctiid.314282 - https://vuldb.com/?submit.603176 - https://note-hxlab.wetolink.com/share/LZJIef0phS6B - https://note-hxlab.wetolink.com/share/LZJIef0phS6B#proof-of-concept-
CVE ID: CVE-2025-6840 State: PUBLISHED Published: 2025-06-29T02:00:15.680Z Last Updated: 2025-06-30T20:13:05.481Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Product Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in code-projects Product Inventory System 1.0. This affects an unknown part of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
y. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314283 - https://vuldb.com/?ctiid.314283 - https://vuldb.com/?submit.603200 - https://github.com/ez-lbz/poc/issues/10 - https://code-projects.org/
CVE ID: CVE-2025-6841 State: PUBLISHED Published: 2025-06-29T02:31:05.866Z Last Updated: 2025-06-30T16:07:31.560Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Product Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Product Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit_product.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314284 - https://vuldb.com/?ctiid.314284 - https://vuldb.com/?submit.603207 - https://github.com/ez-lbz/poc/issues/11 - https://code-projects.org/
CVE ID: CVE-2025-6842 State: PUBLISHED Published: 2025-06-29T03:00:08.886Z Last Updated: 2025-06-30T15:52:54.310Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Product Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Product Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/edit_user.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314285 - https://vuldb.com/?ctiid.314285 - https://vuldb.com/?submit.603208 - https://github.com/ez-lbz/poc/issues/12 - https://code-projects.org/
CVE ID: CVE-2025-6843 State: PUBLISHED Published: 2025-06-29T03:31:05.730Z Last Updated: 2025-06-30T16:08:40.234Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Photo Gallery Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in code-projects Simple Photo Gallery 1.0. It has been classified as critical. Affected is an unknown function of the file /upload-photo.php. The manipulation of the argument file_img leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314286 - https://vuldb.com/?ctiid.314286 - https://vuldb.com/?submit.603263 - https://github.com/ez-lbz/poc/issues/13 - https://code-projects.org/
CVE ID: CVE-2025-6844 State: PUBLISHED Published: 2025-06-29T04:00:16.491Z Last Updated: 2025-06-30T15:54:11.842Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Forum Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Simple Forum 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /signin.php. The manipulation of the argument User leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.
d to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314287 - https://vuldb.com/?ctiid.314287 - https://vuldb.com/?submit.603344 - https://github.com/ez-lbz/poc/issues/14 - https://code-projects.org/
CVE ID: CVE-2025-6845 State: PUBLISHED Published: 2025-06-29T04:31:05.482Z Last Updated: 2025-06-30T15:51:10.509Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Forum Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Simple Forum 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /register1.php. The manipulation of the argument User leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314288
he public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314288 - https://vuldb.com/?ctiid.314288 - https://vuldb.com/?submit.603345 - https://github.com/ez-lbz/poc/issues/15 - https://code-projects.org/
CVE ID: CVE-2025-6846 State: PUBLISHED Published: 2025-06-29T05:00:13.460Z Last Updated: 2025-06-30T15:50:30.048Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Forum Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in code-projects Simple Forum 1.0. This affects an unknown part of the file /forum_viewfile.php. The manipulation of the argument Name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314289 - https://
nd may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314289 - https://vuldb.com/?ctiid.314289 - https://vuldb.com/?submit.603346 - https://github.com/ez-lbz/poc/issues/16 - https://code-projects.org/
CVE ID: CVE-2025-6847 State: PUBLISHED Published: 2025-06-29T05:31:05.154Z Last Updated: 2025-06-30T15:49:48.933Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Forum Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in code-projects Simple Forum 1.0. This vulnerability affects unknown code of the file /forum_edit.php. The manipulation of the argument iii leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314290 - https://vuldb.com
used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314290 - https://vuldb.com/?ctiid.314290 - https://vuldb.com/?submit.603347 - https://github.com/ez-lbz/poc/issues/17 - https://code-projects.org/
CVE ID: CVE-2025-6848 State: PUBLISHED Published: 2025-06-29T06:00:19.519Z Last Updated: 2025-06-30T15:48:43.156Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Forum Problem Types: CWE-434, CWE-284 Description: A vulnerability, which was classified as critical, has been found in code-projects Simple Forum 1.0. This issue affects some unknown processing of the file /forum1.php. The manipulation of the argument File leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314291 - https://vuldb.com/?ctiid.314291 - https://vuldb.com/?submit.603349 - https://github.com/ez-lbz/poc/issues/18 - https://code-projects.org/
CVE ID: CVE-2025-6849 State: PUBLISHED Published: 2025-06-29T06:31:05.779Z Last Updated: 2025-06-30T15:47:37.641Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Forum Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in code-projects Simple Forum 1.0. Affected is an unknown function of the file /forum_edit1.php. The manipulation of the argument text leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3142
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314292 - https://vuldb.com/?ctiid.314292 - https://vuldb.com/?submit.603351 - https://github.com/ez-lbz/poc/issues/19 - https://code-projects.org/
CVE ID: CVE-2025-6850 State: PUBLISHED Published: 2025-06-29T07:00:17.210Z Last Updated: 2025-06-30T15:46:46.563Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Forum Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /forum1.php. The manipulation of the argument File leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.31
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314293 - https://vuldb.com/?ctiid.314293 - https://vuldb.com/?submit.603352 - https://github.com/ez-lbz/poc/issues/20 - https://code-projects.org/
CVE ID: CVE-2025-6851 State: PUBLISHED Published: 2025-07-11T08:22:22.979Z Last Updated: 2025-07-11T15:37:17.142Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: apos37 Products: Broken Link Notifier Problem Types: CWE-918 Description: The Broken Link Notifier plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.0 via the ajax_blinks() function which ultimately calls the check_url_status_code() function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.
y locations originating from the web application and can be used to query and modify information from internal services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0f76c9f8-c57a-4875-b581-f67c9c60021c?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3323864%40broken-link-notifier&new=3323864%40broken-link-notifier&sfp_email=&sfph_mail=
CVE ID: CVE-2025-6853 State: PUBLISHED Published: 2025-06-29T07:31:05.027Z Last Updated: 2025-06-30T15:44:45.431Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: chatchat-space Products: Langchain-Chatchat Problem Types: CWE-22 Description: A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function upload_temp_docs of the file /knowledge_base/upload_temp_docs of the component Backend. The manipulation of the argument flag leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP
the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314325 - https://vuldb.com/?ctiid.314325 - https://vuldb.com/?submit.601155 - https://github.com/chatchat-space/Langchain-Chatchat/issues/5352
CVE ID: CVE-2025-6854 State: PUBLISHED Published: 2025-06-29T08:31:04.802Z Last Updated: 2025-06-30T15:57:07.635Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: chatchat-space Products: Langchain-Chatchat Problem Types: CWE-22 Description: A vulnerability classified as problematic was found in chatchat-space Langchain-Chatchat up to 0.3.1. This vulnerability affects unknown code of the file /v1/files?purpose=assistants. The manipulation leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
sed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314326 - https://vuldb.com/?ctiid.314326 - https://vuldb.com/?submit.601161 - https://github.com/chatchat-space/Langchain-Chatchat/issues/5353
CVE ID: CVE-2025-6855 State: PUBLISHED Published: 2025-06-29T09:00:15.325Z Last Updated: 2025-06-30T16:04:34.640Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: chatchat-space Products: Langchain-Chatchat Problem Types: CWE-22 Description: A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This issue affects some unknown processing of the file /v1/file. The manipulation of the argument flag leads to path traversal. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314327 - https://v
d may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314327 - https://vuldb.com/?ctiid.314327 - https://vuldb.com/?submit.601162 - https://github.com/chatchat-space/Langchain-Chatchat/issues/5354
CVE ID: CVE-2025-6856 State: PUBLISHED Published: 2025-06-29T09:31:05.927Z Last Updated: 2025-06-30T16:02:47.962Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R) Vendors: n/a Products: HDF5 Problem Types: CWE-416, CWE-119 Description: A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FL__reg_gc_list of the file src/H5FL.c. The manipulation leads to use after free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314328 - https://vuldb.com/?ctiid.314328 - https://vuld
es: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314328 - https://vuldb.com/?ctiid.314328 - https://vuldb.com/?submit.602528 - https://github.com/HDFGroup/hdf5/issues/5574 - https://github.com/user-attachments/files/20623417/hdf5_crash_6.txt
CVE ID: CVE-2025-6857 State: PUBLISHED Published: 2025-06-29T10:00:18.376Z Last Updated: 2025-06-30T15:49:20.682Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R) Vendors: n/a Products: HDF5 Problem Types: CWE-121, CWE-119 Description: A vulnerability has been found in HDF5 1.14.6 and classified as problematic. Affected by this vulnerability is the function H5G__node_cmp3 of the file src/H5Gnode.c. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3143
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314329 - https://vuldb.com/?ctiid.314329 - https://vuldb.com/?submit.602529 - https://github.com/HDFGroup/hdf5/issues/5575 - https://github.com/user-attachments/files/20623442/hdf5_crash_7.txt
CVE ID: CVE-2025-6858 State: PUBLISHED Published: 2025-06-29T11:00:14.487Z Last Updated: 2025-06-30T20:11:40.651Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R) Vendors: n/a Products: HDF5 Problem Types: CWE-476, CWE-404 Description: A vulnerability was found in HDF5 1.14.6 and classified as problematic. Affected by this issue is the function H5C__flush_single_entry of the file src/H5Centry.c. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314330 - https://vuldb
y be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314330 - https://vuldb.com/?ctiid.314330 - https://vuldb.com/?submit.602530 - https://github.com/HDFGroup/hdf5/issues/5576 - https://github.com/user-attachments/files/20623475/hdf5_crash_8.txt
CVE ID: CVE-2025-6859 State: PUBLISHED Published: 2025-06-29T12:31:06.164Z Last Updated: 2025-06-30T20:09:04.612Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /panel/pro_sale.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
otely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314331 - https://vuldb.com/?ctiid.314331 - https://vuldb.com/?submit.603373 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-11.md - https://www.sourcecodester.com/