Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
k can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316096 - https://vuldb.com/?ctiid.316096 - https://vuldb.com/?submit.607818 - http://github.com/kone-net/go-chat/issues/14 - https://github.com/kone-net/go-chat/issues/14#issue-3195205637
CVE ID: CVE-2025-7453 State: PUBLISHED Published: 2025-07-11T18:32:05.187Z Last Updated: 2025-07-11T19:11:13.274Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: saltbo Products: zpan Problem Types: CWE-259, CWE-255 Description: A vulnerability was found in saltbo zpan up to 1.6.5/1.7.0-beta2. It has been rated as problematic. This issue affects the function NewToken of the file zpan/internal/app/service/token.go of the component JSON Web Token Handler. The manipulation with the input 123 leads to use of hard-coded password. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult.
attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316097 - https://vuldb.com/?ctiid.316097 - https://vuldb.com/?submit.608447 - https://github.com/saltbo/zpan/issues/219
CVE ID: CVE-2025-7454 State: PUBLISHED Published: 2025-07-11T19:02:05.884Z Last Updated: 2025-07-11T19:34:29.566Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Movie Theater Seat Reservation System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in Campcodes Online Movie Theater Seat Reservation System 1.0. Affected is an unknown function of the file /admin/manage_theater.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnri
tack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316098 - https://vuldb.com/?ctiid.316098 - https://vuldb.com/?submit.609487 - https://github.com/N1n3b9S/cve/issues/2 - https://www.campcodes.com/
CVE ID: CVE-2025-7455 State: PUBLISHED Published: 2025-07-11T19:32:05.247Z Last Updated: 2025-07-11T19:50:32.259Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Movie Theater Seat Reservation System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in Campcodes Online Movie Theater Seat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /manage_reserve.php. The manipulation of the argument mid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA AD
be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316099 - https://vuldb.com/?ctiid.316099 - https://vuldb.com/?submit.609488 - https://github.com/N1n3b9S/cve/issues/3 - https://www.campcodes.com/
CVE ID: CVE-2025-7456 State: PUBLISHED Published: 2025-07-11T20:02:05.824Z Last Updated: 2025-07-11T20:20:13.568Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Movie Theater Seat Reservation System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in Campcodes Online Movie Theater Seat Reservation System 1.0. Affected by this issue is some unknown functionality of the file /reserve.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA
may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316100 - https://vuldb.com/?ctiid.316100 - https://vuldb.com/?submit.609489 - https://github.com/N1n3b9S/cve/issues/4 - https://www.campcodes.com/
CVE ID: CVE-2025-7457 State: PUBLISHED Published: 2025-07-11T20:32:06.234Z Last Updated: 2025-07-11T20:39:02.946Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Movie Theater Seat Reservation System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in Campcodes Online Movie Theater Seat Reservation System 1.0. This affects an unknown part of the file /admin/manage_movie.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vu
e attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316101 - https://vuldb.com/?ctiid.316101 - https://vuldb.com/?submit.609490 - https://github.com/N1n3b9S/cve/issues/5 - https://www.campcodes.com/
CVE ID: CVE-2025-7458 State: PUBLISHED Published: 2025-07-29T12:43:19.427Z Last Updated: 2025-07-29T13:30:52.617Z Vendors: SQLite Products: SQLite Problem Types: CWE-190 Description: An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a large number of expressions in the ORDER BY clause. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://sqlite.org/forum/forumpost/16ce2bb7a639e29b - https://sqlite.org/src/info/12ad822d9b827777
CVE ID: CVE-2025-7459 State: PUBLISHED Published: 2025-07-11T21:02:05.895Z Last Updated: 2025-07-14T20:13:20.776Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Mobile Shop Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in code-projects Mobile Shop 1.0. This vulnerability affects unknown code of the file /EditMobile.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316108 - https://vuldb.com/?c
ed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316108 - https://vuldb.com/?ctiid.316108 - https://vuldb.com/?submit.609657 - https://github.com/xiajian-qx/cve-xiajian/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-7460 State: PUBLISHED Published: 2025-07-11T21:32:07.852Z Last Updated: 2025-07-14T20:13:07.116Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: T6 Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical. Affected by this vulnerability is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument mac leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnric
hed remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316111 - https://vuldb.com/?ctiid.316111 - https://vuldb.com/?submit.609819 - https://github.com/ElvisBlue/Public/blob/main/Vuln/1.md - https://github.com/ElvisBlue/Public/blob/main/Vuln/1.md#poc - https://www.totolink.net/
CVE ID: CVE-2025-7461 State: PUBLISHED Published: 2025-07-12T04:32:06.241Z Last Updated: 2025-07-15T13:48:58.171Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Modern Bag Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Modern Bag 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /action.php. The manipulation of the argument proId leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316112 - https:/
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316112 - https://vuldb.com/?ctiid.316112 - https://vuldb.com/?submit.610055 - https://github.com/bx33661/newvul/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-7462 State: PUBLISHED Published: 2025-07-12T05:32:09.177Z Last Updated: 2025-11-03T17:45:29.573Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:N/A:P/E:ND/RL:OF/RC:C) Vendors: Artifex Products: GhostPDL Problem Types: CWE-476, CWE-404 Description: A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classified as problematic. This affects the function pdf_ferror of the file devices/vector/gdevpdf.c of the component New Output File Open Error Handler. The manipulation leads to null pointer dereference. It is possible to initiate the attack remotely. The identifier of the patch is 619a106ba4c4abed95110f84d5efcd7aee38c7cb. It is
ossible to initiate the attack remotely. The identifier of the patch is 619a106ba4c4abed95110f84d5efcd7aee38c7cb. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.316113 - https://vuldb.com/?ctiid.316113 - https://vuldb.com/?submit.610173 - https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=619a106ba4c4 - https://artifex.com/
CVE ID: CVE-2025-7463 State: PUBLISHED Published: 2025-07-12T06:02:06.537Z Last Updated: 2025-07-14T20:12:45.377Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH1201 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in Tenda FH1201 1.2.0.14. It has been declared as critical. This vulnerability affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component HTTP POST Request Handler. The manipulation of the argument mit_ssid leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
otely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316114 - https://vuldb.com/?ctiid.316114 - https://vuldb.com/?submit.610174 - https://candle-throne-f75.notion.site/Tenda-FH1201-formWrlsafeset-228df0aa118580a3b0dcd29972efbf0e - https://www.tenda.com.cn/
CVE ID: CVE-2025-7464 State: PUBLISHED Published: 2025-07-12T06:32:06.030Z Last Updated: 2025-07-14T20:12:39.220Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C) Vendors: osrg Products: GoBGP Problem Types: CWE-125, CWE-119 Description: A vulnerability classified as problematic has been found in osrg GoBGP up to 3.37.0. Affected is the function SplitRTR of the file pkg/packet/rtr/rtr.go. The manipulation leads to out-of-bounds read. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The name of the patch is e748f43496d74946d14fed85c776452e47b99d64. It is recommended to apply
y is told to be difficult. The name of the patch is e748f43496d74946d14fed85c776452e47b99d64. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316116 - https://vuldb.com/?ctiid.316116 - https://vuldb.com/?submit.610193 - https://github.com/osrg/gobgp/commit/e748f43496d74946d14fed85c776452e47b99d64
CVE ID: CVE-2025-7465 State: PUBLISHED Published: 2025-07-12T07:02:07.562Z Last Updated: 2025-07-14T20:12:32.863Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH1201 Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical was found in Tenda FH1201 1.2.0.14. Affected by this vulnerability is the function fromRouteStatic of the file /goform/fromRouteStatic of the component HTTP POST Request Handler. The manipulation of the argument page leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
e exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316117 - https://vuldb.com/?ctiid.316117 - https://vuldb.com/?submit.610389 - https://candle-throne-f75.notion.site/Tenda-FH1201-fromRouteStatic-229df0aa118580ba952bd3f16857b176 - https://www.tenda.com.cn/
CVE ID: CVE-2025-7466 State: PUBLISHED Published: 2025-07-12T08:02:05.310Z Last Updated: 2025-07-14T20:12:20.601Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: 1000projects Products: ABC Courier Management Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in 1000projects ABC Courier Management 1.0. Affected by this issue is some unknown functionality of the file /add_dealerrequest.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316118 - https://vuldb.com/?ctiid.316118 - https://vuldb.com/?submit.610390 - https://github.com/kensei0x/cve/issues/2
CVE ID: CVE-2025-7467 State: PUBLISHED Published: 2025-07-12T08:32:06.032Z Last Updated: 2025-07-14T20:12:07.809Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Modern Bag Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in code-projects Modern Bag 1.0. This affects an unknown part of the file /product-detail.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316119 - https:/
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316119 - https://vuldb.com/?ctiid.316119 - https://vuldb.com/?submit.610392 - https://github.com/XiaoZhengRS/OpenCVE202507/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-7468 State: PUBLISHED Published: 2025-07-12T09:02:06.642Z Last Updated: 2025-07-14T20:12:00.447Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH1201 Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in Tenda FH1201 1.2.0.14 and classified as critical. This vulnerability affects the function fromSafeUrlFilter of the file /goform/fromSafeUrlFilter of the component HTTP POST Request Handler. The manipulation of the argument page leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
ely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316120 - https://vuldb.com/?ctiid.316120 - https://vuldb.com/?submit.610394 - https://candle-throne-f75.notion.site/Tenda-FH1201-fromSafeUrlFilter-229df0aa118580ceb3e4f54d22814c40 - https://www.tenda.com.cn/
CVE ID: CVE-2025-7469 State: PUBLISHED Published: 2025-07-12T10:32:06.422Z Last Updated: 2025-07-14T20:11:40.469Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/product_add.php. The manipulation of the argument prod_name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316121 - https://vuldb.com/?ctiid.316121 - https://vuldb.com/?submit.610408 - https://github.com/angel9sec/cve/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-7470 State: PUBLISHED Published: 2025-07-12T11:02:05.895Z Last Updated: 2025-07-14T20:11:34.016Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/product_add.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
xploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316122 - https://vuldb.com/?ctiid.316122 - https://vuldb.com/?submit.610420 - https://github.com/angel9sec/cve/issues/2 - https://www.campcodes.com/
CVE ID: CVE-2025-7471 State: PUBLISHED Published: 2025-07-12T11:32:05.843Z Last Updated: 2025-07-15T13:48:12.962Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Modern Bag Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Modern Bag 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/login-back.php. The manipulation of the argument user-name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
en disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316123 - https://vuldb.com/?ctiid.316123 - https://vuldb.com/?submit.610428 - https://github.com/HeDunSec/cve/issues/4 - https://code-projects.org/
CVE ID: CVE-2025-7472 State: PUBLISHED Published: 2025-07-17T18:53:29.947Z Last Updated: 2025-07-17T20:29:02.189Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Sophos Products: Sophos Intercept X for Windows Installer Problem Types: CWE-427 Description: A local privilege escalation vulnerability in the Intercept X for Windows installer prior version 1.22 can lead to a local user gaining system level privileges, if the installer is run as SYSTEM. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sophos.com/en-us/security-advisories/sophos-sa-20250717-cix-lpe
CVE ID: CVE-2025-7473 State: PUBLISHED Published: 2025-10-21T10:58:47.949Z Last Updated: 2025-10-21T13:24:38.046Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L) Vendors: Zohocorp Products: Endpoint Central Problem Types: CWE-91 Description: Zohocorp ManageEngine EndPoint Central versions 11.4.2516.1 and prior are vulnerable to XML Injection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/desktop-central/parsing-xml-data.html
CVE ID: CVE-2025-7474 State: PUBLISHED Published: 2025-07-12T12:02:05.906Z Last Updated: 2025-07-15T13:47:11.075Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Job Diary Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Job Diary 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search.php. The manipulation of the argument Search leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316124 - http
ic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316124 - https://vuldb.com/?ctiid.316124 - https://vuldb.com/?submit.610135 - https://github.com/yihaofuweng/cve/issues/18 - https://code-projects.org/
CVE ID: CVE-2025-7475 State: PUBLISHED Published: 2025-07-12T12:32:05.947Z Last Updated: 2025-07-15T13:46:25.239Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Car Rental System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part of the file /pay.php. The manipulation of the argument mpesa leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316
o the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316125 - https://vuldb.com/?ctiid.316125 - https://vuldb.com/?submit.610432 - https://github.com/y2xsec324/cve/issues/12 - https://code-projects.org/
CVE ID: CVE-2025-7476 State: PUBLISHED Published: 2025-07-12T13:32:04.987Z Last Updated: 2025-07-15T13:41:07.399Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Car Rental System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. This vulnerability affects unknown code of the file /admin/approve.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.
d to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316126 - https://vuldb.com/?ctiid.316126 - https://vuldb.com/?submit.610433 - https://github.com/y2xsec324/cve/issues/13 - https://code-projects.org/
CVE ID: CVE-2025-7477 State: PUBLISHED Published: 2025-07-12T14:32:05.913Z Last Updated: 2025-07-15T13:39:56.836Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Car Rental System Problem Types: CWE-434, CWE-284 Description: A vulnerability, which was classified as critical, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/add_cars.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe