Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-2037 State: PUBLISHED Published: 2025-03-06T19:00:08.814Z Last Updated: 2025-03-06T19:35:38.945Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Blood Bank Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /user_dashboard/delete_requester.php. The manipulation of the argument requester_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298780 - https://vuldb.com/?ctiid.298780 - https://vuldb.com/?submit.512550 - https://github.com/intercpt/XSS1/blob/main/SQL1.md - https://code-projects.org/
CVE ID: CVE-2025-2038 State: PUBLISHED Published: 2025-03-06T19:31:04.771Z Last Updated: 2025-03-06T19:56:25.296Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Blood Bank Management System Problem Types: CWE-548, CWE-552 Description: A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /upload/. The manipulation leads to exposure of information through directory listing. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298781 - https://vuldb.com/?ctiid.298781 - https://vuldb.com/?submit.512558 - https://github.com/intercpt/XSS1/blob/main/Directorylisting.md - https://code-projects.org/
CVE ID: CVE-2025-2039 State: PUBLISHED Published: 2025-03-06T20:00:10.131Z Last Updated: 2025-03-06T20:29:52.331Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: code-projects Products: Blood Bank Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/delete_members.php. The manipulation of the argument member_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298782 - https://vuldb.com/?ctiid.298782 - https://vuldb.com/?submit.512564 - https://github.com/intercpt/XSS1/blob/main/SQL4.md - https://code-projects.org/
CVE ID: CVE-2025-2040 State: PUBLISHED Published: 2025-03-06T20:00:12.464Z Last Updated: 2025-03-06T20:23:45.787Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: zhijiantianya Products: ruoyi-vue-pro Problem Types: CWE-1336, CWE-791 Description: A vulnerability classified as critical was found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected by this vulnerability is an unknown functionality of the file /admin-api/bpm/model/deploy. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298783 - https://vuldb.com/?ctiid.298783 - https://vuldb.com/?submit.512574 - https://github.com/uglory-gll/javasec/blob/main/ruoyi-vue-pro.md
CVE ID: CVE-2025-2041 State: PUBLISHED Published: 2025-03-06T20:31:04.388Z Last Updated: 2025-03-06T20:45:17.129Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: s-a-zhd Products: Ecommerce-Website-using-PHP Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in s-a-zhd Ecommerce-Website-using-PHP 1.0. Affected by this issue is some unknown functionality of the file /shop.php. The manipulation of the argument p_cat leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.2
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298784 - https://vuldb.com/?ctiid.298784 - https://vuldb.com/?submit.512709 - https://www.websecurityinsights.my.id/2025/03/e-commerce-10-shopphppcat-sql-injection.html?m=1
CVE ID: CVE-2025-2042 State: PUBLISHED Published: 2025-03-06T21:00:07.030Z Last Updated: 2025-03-06T21:10:10.217Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: huang-yk Products: student-manage Problem Types: CWE-352, CWE-862 Description: A vulnerability has been found in huang-yk student-manage 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298786 - https://vuldb.com/?ctiid.298786 - https://vuldb.com/?submit.5129
nrichment: References: - https://vuldb.com/?id.298786 - https://vuldb.com/?ctiid.298786 - https://vuldb.com/?submit.512940 - https://github.com/Jingyi-u/student-manage/tree/main
CVE ID: CVE-2025-2043 State: PUBLISHED Published: 2025-03-06T21:31:04.344Z Last Updated: 2025-03-06T21:44:07.178Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: LinZhaoguan Products: pb-cms Problem Types: CWE-502, CWE-20 Description: A vulnerability was found in LinZhaoguan pb-cms 1.0.0 and classified as critical. This issue affects some unknown processing of the file /admin#themes of the component Add New Topic Handler. The manipulation of the argument Topic Key leads to deserialization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.29878
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298787 - https://vuldb.com/?ctiid.298787 - https://vuldb.com/?submit.513243 - https://github.com/Jingyi-u/Pb-cms2/blob/main/README.md
CVE ID: CVE-2025-2044 State: PUBLISHED Published: 2025-03-06T22:00:11.356Z Last Updated: 2025-03-07T15:35:08.641Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: code-projects Products: Blood Bank Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/delete_bloodGroup.php. The manipulation of the argument blood_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: R
tely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298789 - https://vuldb.com/?ctiid.298789 - https://vuldb.com/?submit.513653 - https://github.com/intercpt/XSS1/blob/main/SQL5.md - https://code-projects.org/
CVE ID: CVE-2025-2045 State: PUBLISHED Published: 2025-03-06T13:04:16.661Z Last Updated: 2025-03-06T16:07:19.120Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-863 Description: Improper authorization in GitLab EE affecting all versions from 17.7 prior to 17.7.6, 17.8 prior to 17.8.4, 17.9 prior to 17.9.1 allow users with limited permissions to access to potentially sensitive project analytics data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/512050 - https://hackerone.com/reports/2921111
CVE ID: CVE-2025-2046 State: PUBLISHED Published: 2025-03-06T22:00:14.050Z Last Updated: 2025-03-07T19:42:29.387Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Best Employee Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Best Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/print1.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298796 - https://vuldb.com/?ctiid.298796 - https://vuldb.com/?submit.513971 - https://github.com/Hefei-Coffee/cve/issues/2 - https://www.sourcecodester.com/
CVE ID: CVE-2025-2047 State: PUBLISHED Published: 2025-03-06T22:31:05.286Z Last Updated: 2025-03-07T19:40:47.061Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Art Gallery Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /search.php. The manipulation of the argument search leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
osed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298797 - https://vuldb.com/?ctiid.298797 - https://vuldb.com/?submit.514015 - https://github.com/chenyihao-cyber/CVE/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-2048 State: PUBLISHED Published: 2025-04-01T06:00:05.541Z Last Updated: 2025-04-01T14:58:56.415Z Vendors: Unknown Products: Lana Downloads Manager Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: The Lana Downloads Manager WordPress plugin before 1.10.0 does not validate user input used in a path, which could allow users with an admin role to perform path traversal attacks and download arbitrary files on the server Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/05c664e8-110e-4a31-8377-41a0422508a7/
CVE ID: CVE-2025-2049 State: PUBLISHED Published: 2025-03-06T23:00:07.757Z Last Updated: 2025-03-07T19:40:07.119Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: code-projects Products: Blood Bank System Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file AB+.php. The manipulation of the argument Bloodname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298800 - https://vuldb.
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298800 - https://vuldb.com/?ctiid.298800 - https://vuldb.com/?submit.514089 - https://github.com/ABC-YOLO/cve/blob/main/xss45.md - https://code-projects.org/
CVE ID: CVE-2025-2050 State: PUBLISHED Published: 2025-03-06T23:31:05.954Z Last Updated: 2025-03-07T14:51:27.840Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: User Registration & Login and User Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul User Registration & Login and User Management System 3.3. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnr
nched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298801 - https://vuldb.com/?ctiid.298801 - https://vuldb.com/?submit.514115 - https://github.com/guttlefish/vul/issues/8 - https://phpgurukul.com/
CVE ID: CVE-2025-2051 State: PUBLISHED Published: 2025-03-07T00:00:13.287Z Last Updated: 2025-03-10T18:44:39.548Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Apartment Visitors Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /search-visitor.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298804 - https://vuldb.com/?ctiid.298804 - https://vuldb.com/?submit.514191 - https://github.com/guttlefish/vul/issues/9 - https://phpgurukul.com/
CVE ID: CVE-2025-2052 State: PUBLISHED Published: 2025-03-07T00:00:16.183Z Last Updated: 2025-03-07T16:49:53.632Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Apartment Visitors Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /forgot-password.php. The manipulation of the argument contactno leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
as been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298805 - https://vuldb.com/?ctiid.298805 - https://vuldb.com/?submit.514218 - https://github.com/guttlefish/vul/issues/10 - https://phpgurukul.com/
CVE ID: CVE-2025-2053 State: PUBLISHED Published: 2025-03-07T00:31:06.363Z Last Updated: 2025-03-07T16:52:03.370Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Apartment Visitors Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /visitor-detail.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298806 - https://vuldb.com/?ctiid.298806 - https://vuldb.com/?submit.514234 - https://github.com/guttlefish/vul/issues/11 - https://phpgurukul.com/
CVE ID: CVE-2025-2054 State: PUBLISHED Published: 2025-03-07T01:00:05.857Z Last Updated: 2025-03-07T16:38:42.832Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: code-projects Products: Blood Bank Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit_state.php. The manipulation of the argument state_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
he exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298807 - https://vuldb.com/?ctiid.298807 - https://vuldb.com/?submit.514346 - https://github.com/intercpt/XSS1/blob/main/SQL6.md - https://code-projects.org/
CVE ID: CVE-2025-2055 State: PUBLISHED Published: 2025-04-03T06:00:04.999Z Last Updated: 2025-04-03T13:50:37.497Z Vendors: Unknown Products: MapPress Maps for WordPress Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The MapPress Maps for WordPress plugin before 2.94.9 does not sanitise and escape some parameters when outputing them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a8bfdbbf-6963-4fab-826a-6be770ac72c3/
CVE ID: CVE-2025-2056 State: PUBLISHED Published: 2025-03-14T04:22:34.842Z Last Updated: 2025-03-14T13:45:48.661Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: johndarrel Products: WP Ghost (Hide My WP Ghost) – Security & Firewall Problem Types: CWE-23 Description: The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 5.4.01 via the showFile function. This makes it possible for unauthenticated attackers to read the contents of specific file types on the server, which can contain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
he server, which can contain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f43db496-80ea-442c-9417-7aa03ec95f02?source=cve - https://plugins.trac.wordpress.org/browser/hide-my-wp/tags/5.4.02/models/Files.php#L336
CVE ID: CVE-2025-2057 State: PUBLISHED Published: 2025-03-07T01:00:09.198Z Last Updated: 2025-03-07T16:36:34.940Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Emergency Ambulance Hiring Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/about-us.php. The manipulation of the argument pagedes leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
een disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298812 - https://vuldb.com/?ctiid.298812 - https://vuldb.com/?submit.514461 - https://github.com/12T40910/CVE/issues/5 - https://phpgurukul.com/
CVE ID: CVE-2025-2058 State: PUBLISHED Published: 2025-03-07T01:31:05.685Z Last Updated: 2025-03-07T16:35:35.658Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Emergency Ambulance Hiring Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
he exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298813 - https://vuldb.com/?ctiid.298813 - https://vuldb.com/?submit.514462 - https://github.com/12T40910/CVE/issues/4 - https://phpgurukul.com/
CVE ID: CVE-2025-2059 State: PUBLISHED Published: 2025-03-07T02:00:08.654Z Last Updated: 2025-03-10T19:49:03.423Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Emergency Ambulance Hiring Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/booking-details.php. The manipulation of the argument ambulanceregnum leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298814 - https://vuldb.com/?ctiid.298814 - https://vuldb.com/?submit.514522 - https://github.com/siznwaa/CVE/issues/4 - https://phpgurukul.com/
CVE ID: CVE-2025-2060 State: PUBLISHED Published: 2025-03-07T02:31:05.723Z Last Updated: 2025-03-10T19:47:15.909Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Emergency Ambulance Hiring Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. It has been classified as critical. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298815 - https://vuldb.com/?ctiid.298815 - https://vuldb.com/?submit.514523 - https://github.com/siznwaa/CVE/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-2061 State: PUBLISHED Published: 2025-03-07T03:00:10.517Z Last Updated: 2025-03-10T19:39:57.524Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: code-projects Products: Online Ticket Reservation System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in code-projects Online Ticket Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /passenger.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
s been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.298816 - https://vuldb.com/?ctiid.298816 - https://vuldb.com/?submit.514529 - https://github.com/intercpt/XSS1/blob/main/XSS2.md - https://code-projects.org/
CVE ID: CVE-2025-2062 State: PUBLISHED Published: 2025-03-07T03:31:04.016Z Last Updated: 2025-03-10T19:35:38.442Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: projectworlds Products: Life Insurance Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in projectworlds Life Insurance Management System 1.0. Affected is an unknown function of the file /clientStatus.php. The manipulation of the argument client_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb