Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-6884 State: PUBLISHED Published: 2025-06-30T03:02:05.826Z Last Updated: 2025-06-30T15:26:09.053Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Staff Audit System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in code-projects Staff Audit System 1.0. This issue affects some unknown processing of the file /search_index.php. The manipulation of the argument Search leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
en disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314363 - https://vuldb.com/?ctiid.314363 - https://vuldb.com/?submit.603720 - https://github.com/qingchuana/q1ngchuan/issues/8 - https://code-projects.org/
CVE ID: CVE-2025-6885 State: PUBLISHED Published: 2025-06-30T03:32:07.019Z Last Updated: 2025-06-30T16:33:06.867Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Teachers Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Teachers Record Management System 2.1. Affected is an unknown function of the file /admin/edit-teacher-detail.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
motely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314364 - https://vuldb.com/?ctiid.314364 - https://vuldb.com/?submit.603766 - https://github.com/louis-zly/myCVE/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-6886 State: PUBLISHED Published: 2025-06-30T04:02:23.680Z Last Updated: 2025-06-30T16:27:50.848Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC5 Problem Types: CWE-121, CWE-119 Description: A vulnerability has been found in Tenda AC5 15.03.06.47 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/openSchedWifi. The manipulation of the argument schedStartTime/schedEndTime leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314365 - https://vuldb.com/?ctiid.314365 - https://vuldb.com/?submit.603774 - https://vuldb.com/?submit.603775 - https://lavender-bicycle-a5a.notion.site/Tenda-AC5-setSchedWifi_schedEndTime-21d53a41781f80fb8a90f08898e8d404?source=copy_link - https://lavender-bicycle-a5a.notion.site/Tenda-AC5-setSchedWifi_schedStartTime-21d53a41781f803f97eeddd9828c5c84?source=copy_link - https://www.tenda.com.cn/
CVE ID: CVE-2025-6887 State: PUBLISHED Published: 2025-06-30T04:32:29.352Z Last Updated: 2025-06-30T16:20:32.529Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC5 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Tenda AC5 15.03.06.47 and classified as critical. Affected by this issue is some unknown functionality of the file /goform/SetSysTimeCfg. The manipulation of the argument time/timeZone leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314366
he public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314366 - https://vuldb.com/?ctiid.314366 - https://vuldb.com/?submit.603788 - https://vuldb.com/?submit.603789 - https://lavender-bicycle-a5a.notion.site/Tenda-AC5-fromSetSysTime_time-21d53a41781f8002bdb3fe8344d6fd8c?source=copy_link - https://lavender-bicycle-a5a.notion.site/Tenda-AC5-fromSetSysTime_timeZone-21d53a41781f8021ae2fd2ac639f1b3f?source=copy_link - https://www.tenda.com.cn/
CVE ID: CVE-2025-6888 State: PUBLISHED Published: 2025-06-30T05:02:07.006Z Last Updated: 2025-06-30T16:09:24.851Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Teachers Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Teachers Record Management System 2.1. It has been classified as critical. This affects an unknown part of the file /admin/changeimage.php. The manipulation of the argument tid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314367 - https://vuldb.com/?ctiid.314367 - https://vuldb.com/?submit.603793 - https://github.com/louis-zly/myCVE/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-6889 State: PUBLISHED Published: 2025-06-30T05:32:06.253Z Last Updated: 2025-06-30T16:02:23.851Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Movie Ticketing System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /logIn.php. The manipulation of the argument postName leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
closed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314368 - https://vuldb.com/?ctiid.314368 - https://vuldb.com/?submit.603831 - https://github.com/ez-lbz/poc/issues/30 - https://code-projects.org/
CVE ID: CVE-2025-6890 State: PUBLISHED Published: 2025-06-30T06:02:06.362Z Last Updated: 2025-06-30T16:00:09.759Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Movie Ticketing System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /ticketConfirmation.php. The manipulation of the argument Date leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314369 - https://vuldb.com/?ctiid.314369 - https://vuldb.com/?submit.603844 - https://github.com/ez-lbz/poc/issues/31 - https://code-projects.org/
CVE ID: CVE-2025-6891 State: PUBLISHED Published: 2025-06-30T06:32:05.341Z Last Updated: 2025-06-30T18:18:43.097Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Inventory Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in code-projects Inventory Management System 1.0. Affected is an unknown function of the file /php_action/createUser.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314370 - https://vuldb.com/?ctiid.314370 - https://vuldb.com/?submit.603882 - https://github.com/tangjihong1974/cve/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-6892 State: PUBLISHED Published: 2025-10-17T02:07:25.796Z Last Updated: 2025-10-17T13:46:59.486Z Vendors: Moxa Products: EDR-G9010 Series, EDR-8010 Series, EDF-G1002-BP Series, TN-4900 Series, NAT-102 Series, NAT-108 Series, OnCell G4302-LTE4 Series Problem Types: CWE-863 Description: An Incorrect Authorization vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authentication mechanism allows unauthorized access to protected API endpoints, including those intended for administrative functions. This vulnerability can be exploited after a legitimate user has logged in, as the system fails to properly validate session context
bility can be exploited after a legitimate user has logged in, as the system fails to properly validate session context or privilege boundaries. An attacker may leverage this flaw to perform unauthorized privileged operations. While successful exploitation can severely impact the confidentiality, integrity, and availability of the affected device itself, there is no loss of confidentiality or integrity within any subsequent systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-258121-cve-2025-6892,-cve-2025-6893,-cve-2025-6894,-cve-2025-6949,-cve-2025-6950-multiple-vulnerabilities-in-netwo
CVE ID: CVE-2025-6893 State: PUBLISHED Published: 2025-10-17T02:17:07.319Z Last Updated: 2025-10-17T13:45:31.594Z Vendors: Moxa Products: EDR-G9010 Series, EDR-8010 Series, EDF-G1002-BP Series, TN-4900 Series, NAT-102 Series, NAT-108 Series, OnCell G4302-LTE4 Series Problem Types: CWE-250 Description: An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in broken access control has been identified in the /api/v1/setting/data endpoint of the affected device. This flaw allows a low-privileged authenticated user to call the API without the required permissions, thereby gaining the ability to access or modify system
enticated user to call the API without the required permissions, thereby gaining the ability to access or modify system configuration data. Successful exploitation may lead to privilege escalation, allowing the attacker to access or modify sensitive system settings. While the overall impact is high, there is no loss of confidentiality or integrity within any subsequent systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-258121-cve-2025-6892,-cve-2025-6893,-cve-2025-6894,-cve-2025-6949,-cve-2025-6950-multiple-vulnerabilities-in-netwo
CVE ID: CVE-2025-6894 State: PUBLISHED Published: 2025-10-17T02:25:15.293Z Last Updated: 2025-10-17T13:43:17.614Z Vendors: Moxa Products: EDR-G9010 Series, EDR-8010 Series, EDF-G1002-BP Series, TN-4900 Series, NAT-102 Series, NAT-108 Series, OnCell G4302-LTE4 Series Problem Types: CWE-250 Description: An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authorization logic of the affected device allows an authenticated, low-privileged user to execute the administrative `ping` function, which is restricted to higher-privileged roles. This vulnerability enables the user to perform internal network reconn
, which is restricted to higher-privileged roles. This vulnerability enables the user to perform internal network reconnaissance, potentially discovering internal hosts or services that would otherwise be inaccessible. Repeated exploitation could lead to minor resource consumption. While the overall impact is limited, it may result in some loss of confidentiality and availability on the affected device. There is no impact on the integrity of the device, and the vulnerability does not affect any subsequent systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-258121-cve-2025-6892,-cve-2025-6893,-cve-202
s: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-258121-cve-2025-6892,-cve-2025-6893,-cve-2025-6894,-cve-2025-6949,-cve-2025-6950-multiple-vulnerabilities-in-netwo
CVE ID: CVE-2025-6895 State: PUBLISHED Published: 2025-07-26T04:25:24.963Z Last Updated: 2025-07-28T18:33:26.188Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: melapress Products: Melapress Login Security Problem Types: CWE-288 Description: The Melapress Login Security plugin for WordPress is vulnerable to Authentication Bypass due to missing authorization within the get_valid_user_based_on_token() function in versions 2.1.0 to 2.1.1. This makes it possible for unauthenticated attackers who know an arbitrary user meta value to bypass authentication checks and log in as that user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://ww
thentication checks and log in as that user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6f65d5c4-6f53-4836-9130-c9f4ed3be893?source=cve - https://wordpress.org/plugins/melapress-login-security/#developers - https://plugins.trac.wordpress.org/browser/melapress-login-security/tags/2.1.1/app/class-melapress-login-security.php - https://plugins.trac.wordpress.org/browser/melapress-login-security/tags/2.1.1/app/modules/temporary-logins/class-temporary-logins.php - https://plugins.trac.wordpress.org/changeset/3328137
CVE ID: CVE-2025-6896 State: PUBLISHED Published: 2025-06-30T07:02:05.641Z Last Updated: 2025-06-30T18:00:17.539Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DI-7300G+ Problem Types: CWE-78, CWE-77 Description: A vulnerability classified as critical has been found in D-Link DI-7300G+ 19.12.25A1. Affected is an unknown function of the file wget_test.asp. The manipulation of the argument url leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314388 - https://vuldb.com/?c
ed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314388 - https://vuldb.com/?ctiid.314388 - https://vuldb.com/?submit.604441 - https://github.com/2664521593/mycve/blob/main/D-Link_DI/CJ_IN_DLink_1_en.pdf - https://www.dlink.com/
CVE ID: CVE-2025-6897 State: PUBLISHED Published: 2025-06-30T07:32:05.975Z Last Updated: 2025-06-30T15:24:09.757Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: D-Link Products: DI-7300G+ Problem Types: CWE-78, CWE-77 Description: A vulnerability classified as critical was found in D-Link DI-7300G+ 19.12.25A1. Affected by this vulnerability is an unknown functionality of the file httpd_debug.asp. The manipulation of the argument Time leads to os command injection. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314389 - https://vuldb.com/?ctiid
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314389 - https://vuldb.com/?ctiid.314389 - https://vuldb.com/?submit.604442 - https://github.com/2664521593/mycve/blob/main/D-Link_DI/CJ_IN_DLink_2_en.pdf - https://www.dlink.com/
CVE ID: CVE-2025-6898 State: PUBLISHED Published: 2025-06-30T08:02:06.036Z Last Updated: 2025-06-30T17:47:48.976Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DI-7300G+ Problem Types: CWE-78, CWE-77 Description: A vulnerability, which was classified as critical, has been found in D-Link DI-7300G+ 19.12.25A1. Affected by this issue is some unknown functionality of the file in proxy_client.asp. The manipulation of the argument proxy_srv/proxy_lanport/proxy_lanip/proxy_srvport leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vul
aunched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314390 - https://vuldb.com/?ctiid.314390 - https://vuldb.com/?submit.604443 - https://github.com/2664521593/mycve/blob/main/D-Link_DI/CJ_IN_DLink_3_en.pdf - https://www.dlink.com/
CVE ID: CVE-2025-6899 State: PUBLISHED Published: 2025-06-30T08:32:05.999Z Last Updated: 2025-06-30T17:34:29.901Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DI-7300G+, DI-8200G Problem Types: CWE-78, CWE-77 Description: A vulnerability, which was classified as critical, was found in D-Link DI-7300G+ and DI-8200G 17.12.20A1/19.12.25A1. This affects an unknown part of the file msp_info.htm. The manipulation of the argument flag/cmd/iface leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314391 - https://vuldb.com/?ctiid.314391 - https://vuldb.com/?submit.604444 - https://github.com/2664521593/mycve/blob/main/D-Link_DI/CJ_IN_DLink_4_en.pdf - https://www.dlink.com/
CVE ID: CVE-2025-6900 State: PUBLISHED Published: 2025-06-30T09:02:05.408Z Last Updated: 2025-06-30T15:23:23.944Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Library System Problem Types: CWE-434, CWE-284 Description: A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-book.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.31439
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314392 - https://vuldb.com/?ctiid.314392 - https://vuldb.com/?submit.604504 - https://github.com/W2-l0mechan1c/CVE1/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-6901 State: PUBLISHED Published: 2025-06-30T09:32:05.589Z Last Updated: 2025-06-30T15:11:11.641Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Inventory Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /php_action/removeUser.php. The manipulation of the argument userid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314393 - https://vuldb.com/?ctiid.314393 - https://vuldb.com/?submit.604508 - https://github.com/p1nkshox/cve/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-6902 State: PUBLISHED Published: 2025-06-30T10:02:06.078Z Last Updated: 2025-06-30T14:57:01.785Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Inventory Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /php_action/editUser.php. The manipulation of the argument edituserName leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: R
tely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314394 - https://vuldb.com/?ctiid.314394 - https://vuldb.com/?submit.604509 - https://github.com/p1nkshox/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-6903 State: PUBLISHED Published: 2025-06-30T10:32:06.005Z Last Updated: 2025-06-30T14:55:55.880Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Car Rental System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Car Rental System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/approve.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
s been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314395 - https://vuldb.com/?ctiid.314395 - https://vuldb.com/?submit.604568 - https://github.com/MaxedFF/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-6904 State: PUBLISHED Published: 2025-06-30T11:02:05.746Z Last Updated: 2025-06-30T14:53:46.287Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Car Rental System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Car Rental System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_cars.php. The manipulation of the argument car_name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314396 - https://vuldb.com/?ctiid.314396 - https://vuldb.com/?submit.604569 - https://github.com/MaxedFF/cve/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-6905 State: PUBLISHED Published: 2025-06-30T11:32:05.447Z Last Updated: 2025-06-30T14:42:35.604Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Car Rental System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in code-projects Car Rental System 1.0. This issue affects some unknown processing of the file /signup.php. The manipulation of the argument fname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
sed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314399 - https://vuldb.com/?ctiid.314399 - https://vuldb.com/?submit.606156 - https://github.com/zzb1388/cve/issues/15 - https://code-projects.org/