Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
e attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313325 - https://vuldb.com/?ctiid.313325 - https://vuldb.com/?submit.596472 - https://www.websecurityinsights.my.id/2025/06/script-and-tools-real-estate-management.html
CVE ID: CVE-2025-6330 State: PUBLISHED Published: 2025-06-20T10:00:11.793Z Last Updated: 2025-06-20T13:50:12.910Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Directory Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Directory Management System 1.0. Affected is an unknown function of the file /searchdata.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313326 - https://vuldb.com/?ctiid.313326 - https://vuldb.com/?submit.596532 - https://github.com/f1rstb100d/myCVE/issues/77 - https://phpgurukul.com/
CVE ID: CVE-2025-6331 State: PUBLISHED Published: 2025-06-20T10:00:15.169Z Last Updated: 2025-06-20T13:48:29.541Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Directory Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Directory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/search-directory.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: R
tely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313327 - https://vuldb.com/?ctiid.313327 - https://vuldb.com/?submit.596533 - https://github.com/f1rstb100d/myCVE/issues/78 - https://phpgurukul.com/
CVE ID: CVE-2025-6332 State: PUBLISHED Published: 2025-06-20T10:31:06.808Z Last Updated: 2025-06-20T13:02:32.396Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Directory Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Directory Management System 2.0. Affected by this issue is some unknown functionality of the file /admin/manage-directory.php. The manipulation of the argument del leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichmen
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313328 - https://vuldb.com/?ctiid.313328 - https://vuldb.com/?submit.596534 - https://github.com/f1rstb100d/myCVE/issues/79 - https://phpgurukul.com/
CVE ID: CVE-2025-6333 State: PUBLISHED Published: 2025-06-20T10:31:09.529Z Last Updated: 2025-06-20T12:57:15.343Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Directory Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Directory Management System 2.0. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
xploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313329 - https://vuldb.com/?ctiid.313329 - https://vuldb.com/?submit.596535 - https://github.com/f1rstb100d/myCVE/issues/80 - https://phpgurukul.com/
CVE ID: CVE-2025-6334 State: PUBLISHED Published: 2025-06-20T11:00:17.259Z Last Updated: 2025-06-20T12:48:58.377Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-867 Problem Types: CWE-121, CWE-119 Description: A vulnerability has been found in D-Link DIR-867 1.0 and classified as critical. This vulnerability affects the function strncpy of the component Query String Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: -
ed. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313330 - https://vuldb.com/?ctiid.313330 - https://vuldb.com/?submit.596579 - https://github.com/Thir0th/Thir0th-CVE/blob/main/DIR-867%20AC1750.md - https://www.dlink.com/
CVE ID: CVE-2025-6335 State: PUBLISHED Published: 2025-06-20T11:00:19.524Z Last Updated: 2025-06-20T12:25:00.465Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: n/a Products: DedeCMS Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in DedeCMS up to 5.7.2 and classified as critical. This issue affects some unknown processing of the file /include/dedetag.class.php of the component Template Handler. The manipulation of the argument notes leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
sclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313331 - https://vuldb.com/?ctiid.313331 - https://vuldb.com/?submit.596624 - https://github.com/jujubooom/CVE/issues/1
CVE ID: CVE-2025-6336 State: PUBLISHED Published: 2025-06-20T11:31:06.875Z Last Updated: 2025-06-20T12:21:16.451Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: EX1200T Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. It has been classified as critical. Affected is an unknown function of the file /boafrm/formTmultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnric
ack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313332 - https://vuldb.com/?ctiid.313332 - https://vuldb.com/?submit.596690 - https://github.com/awindog/cve/blob/main/688/12.md - https://github.com/awindog/cve/blob/main/688/12.md#poc - https://www.totolink.net/
CVE ID: CVE-2025-6337 State: PUBLISHED Published: 2025-06-20T12:00:18.533Z Last Updated: 2025-06-23T20:26:09.429Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: A3002R, A3002RU Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615/4.0.0-B20230531.1404. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formTmultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may
-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313333 - https://vuldb.com/?ctiid.313333 - https://vuldb.com/?submit.596691 - https://vuldb.com/?submit.596692 - https://github.com/awindog/cve/blob/main/688/13.md - https://github.com/awindog/cve/blob/main/688/14.md - https://www.totolink.net/
CVE ID: CVE-2025-6338 State: PUBLISHED Published: 2025-10-16T09:22:14.709Z Last Updated: 2025-10-16T13:14:11.939Z Vendors: The Qt Company Products: Qt Problem Types: CWE-459 Description: There is an incomplete cleanup vulnerability in Qt Network's Schannel support on Windows which can lead to a Denial of Service over a long period.This issue affects Qt from 5.15.0 through 6.8.3, from 6.9.0 before 6.9.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://codereview.qt-project.org/c/qt/qtbase/+/651495
CVE ID: CVE-2025-6339 State: PUBLISHED Published: 2025-06-20T12:00:19.885Z Last Updated: 2025-06-20T13:37:04.304Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: ponaravindb Products: Hospital Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in ponaravindb Hospital Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /func3.php. The manipulation of the argument username1 leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313334 - https://vuldb.com/?ctiid.313334 - https://vuldb.com/?submit.596744 - https://github.com/freshgaming/CVEPOC/blob/main/sql-cve-new.pdf
CVE ID: CVE-2025-6340 State: PUBLISHED Published: 2025-06-20T12:31:05.561Z Last Updated: 2025-06-20T13:20:43.769Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: School Fees Payment System Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in code-projects School Fees Payment System 1.0. This affects an unknown part of the file /branch.php. The manipulation of the argument Branch/Address/Detail leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
he exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313335 - https://vuldb.com/?ctiid.313335 - https://vuldb.com/?submit.596998 - https://github.com/tuooo/CVE/issues/14 - https://code-projects.org/
CVE ID: CVE-2025-6341 State: PUBLISHED Published: 2025-06-20T12:31:07.386Z Last Updated: 2025-06-20T13:18:11.074Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: School Fees Payment System Problem Types: CWE-352, CWE-862 Description: A vulnerability classified as problematic was found in code-projects School Fees Payment System 1.0. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313336 - https://vuldb.com/?ct
d. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313336 - https://vuldb.com/?ctiid.313336 - https://vuldb.com/?submit.597023 - https://github.com/tuooo/CVE/issues/15 - https://code-projects.org/
CVE ID: CVE-2025-6342 State: PUBLISHED Published: 2025-06-20T13:00:17.504Z Last Updated: 2025-06-20T13:24:06.207Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Shoe Store Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. This issue affects some unknown processing of the file /admin/admin_football.php. The manipulation of the argument pid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313337 - https://vuldb.com/?ctiid.313337 - https://vuldb.com/?submit.597043 - https://github.com/ltranquility/CVE/issues/7 - https://code-projects.org/
CVE ID: CVE-2025-6343 State: PUBLISHED Published: 2025-06-20T13:31:05.644Z Last Updated: 2025-06-23T20:27:45.695Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Shoe Store Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in code-projects Online Shoe Store 1.0. Affected is an unknown function of the file /admin/admin_product.php. The manipulation of the argument pid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
closed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313338 - https://vuldb.com/?ctiid.313338 - https://vuldb.com/?submit.597044 - https://github.com/ltranquility/CVE/issues/6 - https://code-projects.org/
CVE ID: CVE-2025-6344 State: PUBLISHED Published: 2025-06-20T14:00:15.853Z Last Updated: 2025-06-20T14:29:56.862Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Shoe Store Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Online Shoe Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /contactus.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
een disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313339 - https://vuldb.com/?ctiid.313339 - https://vuldb.com/?submit.597045 - https://github.com/ltranquility/CVE/issues/5 - https://code-projects.org/
CVE ID: CVE-2025-6345 State: PUBLISHED Published: 2025-06-20T14:31:06.277Z Last Updated: 2025-06-23T20:29:00.642Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: My Food Recipe Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in SourceCodester My Food Recipe 1.0 and classified as problematic. Affected by this issue is the function addRecipeModal of the file /endpoint/add-recipe.php of the component Add Recipe Page. The manipulation of the argument Name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vu
launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313340 - https://vuldb.com/?ctiid.313340 - https://vuldb.com/?submit.597093 - https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README4.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-6346 State: PUBLISHED Published: 2025-06-20T15:00:15.830Z Last Updated: 2025-06-20T15:26:13.619Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Advance Charity Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Advance Charity Management System 1.0. It has been classified as critical. This affects an unknown part of the file /members/fundDetails.php. The manipulation of the argument m06 leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichmen
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313341 - https://vuldb.com/?ctiid.313341 - https://vuldb.com/?submit.595346 - https://gist.github.com/0xCaptainFahim/86a679533ca293c98be5ab91b76b213f - https://www.sourcecodester.com/
CVE ID: CVE-2025-6347 State: PUBLISHED Published: 2025-06-20T15:31:05.683Z Last Updated: 2025-06-20T15:50:02.649Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Responsive Blog Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in code-projects Responsive Blog 1.0/1.12.4/3.3.4. It has been declared as problematic. This vulnerability affects unknown code of the file /responsive/resblog/blogadmin/admin/pageViewMembers.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
ely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313342 - https://vuldb.com/?ctiid.313342 - https://vuldb.com/?submit.595676 - https://gist.github.com/0xCaptainFahim/8bb9021dcea33863eaf0279aaca2671c - https://code-projects.org/
CVE ID: CVE-2025-6348 State: PUBLISHED Published: 2025-07-30T08:23:02.026Z Last Updated: 2025-07-30T13:34:07.164Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: nextendweb Products: Smart Slider 3 Problem Types: CWE-89 Description: The Smart Slider 3 plugin for WordPress is vulnerable to time-based SQL Injection via the ‘sliderid’ parameter in all versions up to, and including, 3.5.1.28 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing que
ticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/188baddc-134c-4a82-898b-9b038e795893?source=cve - https://plugins.trac.wordpress.org/changeset/3332052/
CVE ID: CVE-2025-6350 State: PUBLISHED Published: 2025-06-28T03:21:59.671Z Last Updated: 2025-06-30T16:08:02.930Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: rextheme Products: WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress Problem Types: CWE-79 Description: The WP VR – 360 Panorama and Free Virtual Tour Builder For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hotspot-hover’ parameter in all versions up to, and including, 8.5.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrar
scaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ce3d82ec-5f94-4511-a6ba-8ee1dec06160?source=cve - https://plugins.trac.wordpress.org/browser/wpvr/trunk/admin/classes/class-wpvr-ajax.php#L171 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3317520%40wpvr%2Ftrunk&old=3314284%40wpvr%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2025-6351 State: PUBLISHED Published: 2025-06-20T16:00:11.757Z Last Updated: 2025-06-23T19:28:15.312Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Employee Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in itsourcecode Employee Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /editprofile.php. The manipulation of the argument emp1name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313343 - https://vuldb.com/?ctiid.313343 - https://vuldb.com/?submit.597209 - https://github.com/ltranquility/CVE/issues/8 - https://itsourcecode.com/
CVE ID: CVE-2025-6352 State: PUBLISHED Published: 2025-06-20T16:00:13.679Z Last Updated: 2025-06-23T17:14:37.442Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: code-projects Products: Automated Voting System Problem Types: CWE-425 Description: A vulnerability classified as problematic has been found in code-projects Automated Voting System 1.0. Affected is an unknown function of the file /vote.php of the component Backend. The manipulation leads to direct request. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313344 - https://vuldb.com/?ctiid.313344 - https://vuldb.com/?submit.597239 - https://github.com/asd1238525/cve/blob/main/Unauthorized.md - https://code-projects.org/
CVE ID: CVE-2025-6353 State: PUBLISHED Published: 2025-06-20T16:31:05.413Z Last Updated: 2025-06-23T15:30:17.110Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Responsive Blog Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in code-projects Responsive Blog 1.0. Affected by this vulnerability is an unknown functionality of the file /search.php. The manipulation of the argument keyword leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
sclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313345 - https://vuldb.com/?ctiid.313345 - https://vuldb.com/?submit.597260 - https://github.com/asd1238525/cve/blob/main/xss2.md - https://github.com/asd1238525/cve/blob/main/xss2.md#poc - https://code-projects.org/
CVE ID: CVE-2025-6354 State: PUBLISHED Published: 2025-06-20T16:31:07.092Z Last Updated: 2025-06-23T15:29:51.297Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Shoe Store Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. Affected by this issue is some unknown functionality of the file /function/customer_signup.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen