Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
d to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324477 - https://vuldb.com/?ctiid.324477 - https://vuldb.com/?submit.646977 - https://github.com/zzb1388/cve/issues/76 - https://www.campcodes.com/
CVE ID: CVE-2025-10564 State: PUBLISHED Published: 2025-09-16T20:32:07.007Z Last Updated: 2025-09-17T13:56:26.602Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Grocery Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=delete_category. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324478 - https://vuldb.com/?ctiid.324478 - https://vuldb.com/?submit.646978 - https://github.com/zzb1388/cve/issues/75 - https://www.campcodes.com/
CVE ID: CVE-2025-10565 State: PUBLISHED Published: 2025-09-16T20:32:09.802Z Last Updated: 2025-09-17T13:48:28.408Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Grocery Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_receiving. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichme
rom remote. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324479 - https://vuldb.com/?ctiid.324479 - https://vuldb.com/?submit.646981 - https://github.com/zzb1388/cve/issues/74 - https://www.campcodes.com/
CVE ID: CVE-2025-10566 State: PUBLISHED Published: 2025-09-16T21:32:07.065Z Last Updated: 2025-09-17T13:40:38.983Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Grocery Sales and Inventory System Problem Types: CWE-79, CWE-94 Description: A vulnerability was identified in Campcodes Grocery Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /index.php?page=users. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
he exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324480 - https://vuldb.com/?ctiid.324480 - https://vuldb.com/?submit.646982 - https://github.com/zzb1388/cve/issues/73 - https://www.campcodes.com/
CVE ID: CVE-2025-10567 State: PUBLISHED Published: 2025-11-05T06:00:02.503Z Last Updated: 2025-11-05T18:45:38.517Z Vendors: Unknown Products: FunnelKit Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The FunnelKit WordPress plugin before 3.12.0.1 does not sanitize user input before echoing it back in some of its checkout-related AJAX actions, allowing attackers to conduct reflected XSS attacks against logged-in users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c7536b0c-3bce-449d-937e-b0195990110a/
CVE ID: CVE-2025-10568 State: PUBLISHED Published: 2025-09-19T19:39:08.802Z Last Updated: 2025-09-19T19:57:00.834Z Vendors: HP Inc. Products: HyperX NGENUITY Problem Types: CWE-78 Description: HyperX NGENUITY software is potentially vulnerable to arbitrary code execution. HP is releasing updated software to address the potential vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_13012432-13012454-16/hpsbhf04050
CVE ID: CVE-2025-10570 State: PUBLISHED Published: 2025-10-22T06:40:59.103Z Last Updated: 2025-10-22T15:46:51.276Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: wpdesk Products: Flexible Refund and Return Order for WooCommerce Problem Types: CWE-639 Description: The Flexible Refund and Return Order for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.38 via the save_refund_request() function. This makes it possible for authenticated attackers, with subscriber-level access and above, to submit refund requests for arbitrary orders that they do not own. Additional Analyst Notes: - CISA ADP Vulnr
d above, to submit refund requests for arbitrary orders that they do not own. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bd9b6575-f49b-4586-a716-69d39242423d?source=cve - https://plugins.trac.wordpress.org/changeset/3375005/flexible-refund-and-return-order-for-woocommerce
CVE ID: CVE-2025-10571 State: PUBLISHED Published: 2025-11-20T18:06:00.586Z Last Updated: 2025-11-21T16:05:22.625Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: ABB Products: ABB Ability Edgenius Problem Types: CWE-288 Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in ABB ABB Ability Edgenius.This issue affects ABB Ability Edgenius: 3.2.0.0, 3.2.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=7PAA022088&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2025-10572 State: REJECTED Published: N/A Last Updated: 2025-09-16T17:59:20.151Z Description: No description available.
CVE ID: CVE-2025-10575 State: PUBLISHED Published: 2025-10-15T08:25:53.166Z Last Updated: 2025-11-24T20:29:49.520Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: ivycat Products: WP jQuery Pager Problem Types: CWE-89 Description: The WP jQuery Pager plugin for WordPress is vulnerable to SQL Injection via the 'ids' shortcode attribute parameter handled by the WPJqueryPaged::get_gallery_page_imgs() function in all versions up to, and including, 1.4.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and abov
on on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3a70b64b-a0e8-4b5c-af05-cf8f1d611dec?source=cve - https://plugins.trac.wordpress.org/browser/wp-jquery-pdf-paged/trunk/wp-jquery-paged.php#L80
CVE ID: CVE-2025-10576 State: PUBLISHED Published: 2025-10-15T16:53:56.658Z Last Updated: 2025-10-22T03:55:31.039Z Vendors: HP, Inc. Products: Sound Research Problem Types: CWE-266 Description: Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. HP is releasing updated audio packages to mitigate the potential vulnerabilities. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_13092608-13092602-16/hpsbhf04051
CVE ID: CVE-2025-10577 State: PUBLISHED Published: 2025-10-15T16:56:44.939Z Last Updated: 2025-10-22T03:55:32.178Z Vendors: HP, Inc. Products: Sound Research Problem Types: CWE-266 Description: Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. HP is releasing updated audio packages to mitigate the potential vulnerabilities Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_13092608-13092602-16/hpsbhf04051
CVE ID: CVE-2025-10578 State: PUBLISHED Published: 2025-10-01T18:44:49.949Z Last Updated: 2025-10-02T03:55:48.375Z Vendors: HP Inc. Products: HP Support Assistant Problem Types: CWE-269 Description: A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.47.41.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_13048717-13048785-16/hpsbgn04053
CVE ID: CVE-2025-10579 State: PUBLISHED Published: 2025-10-25T04:22:44.402Z Last Updated: 2025-10-27T15:57:24.084Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: wp_media Products: BackWPup – WordPress Backup & Restore Plugin Problem Types: CWE-862 Description: The BackWPup – WordPress Backup & Restore Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'backwpup_working' AJAX action in all versions up to, and including, 5.5.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve access to a back-up's filename while a backup is running. This info
with Subscriber-level access and above, to retrieve access to a back-up's filename while a backup is running. This information has little value on it's own, but could be used to aid in a brute force attack to retrieve back-up contents in limited environments (i.e. NGINX). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1e9a1484-2000-47fa-9890-fa02eddabcd9?source=cve - https://research.cleantalk.org/cve-2025-10579 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3381187%40backwpup%2Ftrunk&old=3362645%40backwpup%2Ftrunk&sfp_email=&sfph_mail=#file23
CVE ID: CVE-2025-10580 State: PUBLISHED Published: 2025-10-25T06:49:22.861Z Last Updated: 2025-10-27T15:45:22.899Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: marketingfire Products: Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets Problem Types: CWE-79 Description: The Widget Options – The #1 WordPress Widget & Block Control Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple functions in all versions up to, and including, 4.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to
ion and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/8169e533-ef3b-4fd7-9571-61e5528b7652?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3382357%40widget-options&new=3382357%40widget-options&sfp_email=&sfph_mail=
CVE ID: CVE-2025-10581 State: PUBLISHED Published: 2025-10-15T14:25:49.015Z Last Updated: 2025-10-16T03:56:51.138Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: PC Manager Problem Types: CWE-427 Description: A potential DLL hijacking vulnerability was discovered in the Lenovo PC Manager during an internal security assessment that could allow a local authenticated user to execute code with elevated privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://iknow.lenovo.com.cn/detail/432378
CVE ID: CVE-2025-10582 State: PUBLISHED Published: 2025-10-03T11:17:19.485Z Last Updated: 2025-10-03T14:03:16.127Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: ekndev Products: WP Dispatcher Problem Types: CWE-89 Description: The WP Dispatcher plugin for WordPress is vulnerable to SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extr
tributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a9b3b6cc-faaa-46c2-ab82-00c7138a8f27?source=cve - https://plugins.trac.wordpress.org/browser/wp-dispatcher/trunk/admin/class-wp-dispatcher-shortcode.php#L78 - https://wordpress.org/plugins/wp-dispatcher/
CVE ID: CVE-2025-10584 State: PUBLISHED Published: 2025-09-17T03:02:07.302Z Last Updated: 2025-10-20T04:39:31.064Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-79, CWE-94 Description: A vulnerability was identified in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /intranet/educar_calendario_anotacao_cad.php. Such manipulation of the argument nm_anotacao/descricao leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324561
ailable and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324561 - https://vuldb.com/?ctiid.324561 - https://vuldb.com/?submit.644374 - https://karinagante.github.io/cve-2025-10584/ - https://karinagante.github.io/cve-2025-10584/#proof-of-concept-poc
CVE ID: CVE-2025-10585 State: PUBLISHED Published: 2025-09-24T16:17:11.576Z Last Updated: 2025-10-29T16:13:02.373Z Vendors: Google Products: Chrome Problem Types: CWE-843 Description: Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html - https://issues.chromium.org/issues/445380761
CVE ID: CVE-2025-10586 State: PUBLISHED Published: 2025-10-09T01:48:48.789Z Last Updated: 2025-10-09T17:55:41.066Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: jackdewey Products: Community Events Problem Types: CWE-89 Description: The Community Events plugin for WordPress is vulnerable to SQL Injection via the ‘event_venue’ parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries tha
ed attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/92f3b923-884e-4f61-9bf8-62dfb267a27e?source=cve - https://plugins.trac.wordpress.org/browser/community-events/trunk/community-events.php?rev=3115223 - https://wordpress.org/plugins/community-events/ - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3369351%40community-events%2Ftrunk&old=3115222%40community-events%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2025-10587 State: PUBLISHED Published: 2025-10-08T03:31:33.434Z Last Updated: 2025-10-08T14:19:31.897Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: jackdewey Products: Community Events Problem Types: CWE-89 Description: The Community Events plugin for WordPress is vulnerable to SQL Injection via the event_category parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries th
ted attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f8a54a18-64e2-4046-8143-2b5116c4200b?source=cve - https://plugins.trac.wordpress.org/browser/community-events/trunk/community-events.php?rev=3115223 - https://wordpress.org/plugins/community-events/ - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3369351%40community-events%2Ftrunk&old=3115222%40community-events%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2025-10588 State: PUBLISHED Published: 2025-10-22T06:40:57.974Z Last Updated: 2025-10-22T13:32:51.903Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: pixelyoursite Products: PixelYourSite – Your smart PIXEL (TAG) & API Manager Problem Types: CWE-352 Description: The PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 11.1.2. This is due to missing or incorrect nonce validation on the adminEnableGdprAjax() function. This makes it possible for unauthenticated attackers to modify GDPR settings via a forged request granted they can trick a site ad
it possible for unauthenticated attackers to modify GDPR settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/53c25e24-fac6-404c-be6c-678a383b48a1?source=cve - https://plugins.trac.wordpress.org/changeset/3379001/pixelyoursite
CVE ID: CVE-2025-10589 State: PUBLISHED Published: 2025-09-17T03:31:57.615Z Last Updated: 2025-09-17T13:28:57.878Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: N-Partner Products: N-Reporter, N-Cloud, N-Probe Problem Types: CWE-78 Description: The N-Reporter, N-Cloud, and N-Probe developed by N-Partner has an OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-10386-231ae-1.html - https://www.twcert.org.tw/en/cp-139-10387-b8a4e-2.html
CVE ID: CVE-2025-10590 State: PUBLISHED Published: 2025-09-17T11:02:05.554Z Last Updated: 2025-09-17T13:05:18.500Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-79, CWE-94 Description: A security flaw has been discovered in Portabilis i-Educar up to 2.10. The impacted element is an unknown function of the file /intranet/educar_usuario_det.php. The manipulation of the argument ref_pessoa results in cross site scripting. The attack can be executed remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324607
lic and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324607 - https://vuldb.com/?ctiid.324607 - https://vuldb.com/?submit.648832 - https://github.com/marcelomulder/CVE/blob/main/i-educar/Cross-Site%20Scripting%20(XSS)%20Reflected%20endpoint%20%60educar_usuario_det.php%60%20parameter%20%60ref_pessoa%60.md
CVE ID: CVE-2025-10591 State: PUBLISHED Published: 2025-09-17T11:02:08.196Z Last Updated: 2025-09-17T13:06:04.090Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-79, CWE-94 Description: A weakness has been identified in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /intranet/educar_funcao_cad.php of the component Editar Função Page. This manipulation of the argument abreviatura/tipoacao causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichm
The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324608 - https://vuldb.com/?ctiid.324608 - https://vuldb.com/?submit.648837 - https://github.com/marcelomulder/CVE/blob/main/i-educar/Cross-Site%20Scripting%20(XSS)%20Stored%20endpoint%20%60educar_funcao_cad.php%60%20parameters%20%60abreviatura%60,%20%60tipoacao%60.md
CVE ID: CVE-2025-10592 State: PUBLISHED Published: 2025-09-17T13:02:06.965Z Last Updated: 2025-09-17T14:01:25.881Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Online Public Access Catalog OPAC Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in itsourcecode Online Public Access Catalog OPAC 1.0. This impacts an unknown function of the file mysearch.php of the component POST Parameter Handler. Such manipulation of the argument search_field/search_text leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: -
tack may be performed from remote. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324609 - https://vuldb.com/?ctiid.324609 - https://vuldb.com/?submit.648959 - https://github.com/drew-byte/Online-Public-Access-Catalog-OPAC-SQLi-PoC/blob/main/README.md - https://itsourcecode.com/
CVE ID: CVE-2025-10593 State: PUBLISHED Published: 2025-09-17T13:32:06.073Z Last Updated: 2025-09-17T13:53:33.176Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Student File Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/update_student.php. Performing manipulation of the argument stud_id results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
y. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324610 - https://vuldb.com/?ctiid.324610 - https://vuldb.com/?submit.649223 - https://github.com/qcycop0101-hash/CVE/issues/13 - https://www.sourcecodester.com/