Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315022 - https://vuldb.com/?ctiid.315022 - https://vuldb.com/?submit.604822 - https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README13.md
CVE ID: CVE-2025-7112 State: PUBLISHED Published: 2025-07-07T04:32:04.972Z Last Updated: 2025-07-07T17:51:35.238Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Portabilis i-Educar 2.9.0 and classified as problematic. This issue affects some unknown processing of the file /intranet/educar_funcao_det.php?cod_funcao=COD&ref_cod_instituicao=COD of the component Function Management Module. The manipulation of the argument Função leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vend
scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315023 - https://vuldb.com/?ctiid.315023 - https://vuldb.com/?submit.604824 - https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README14.md
CVE ID: CVE-2025-7113 State: PUBLISHED Published: 2025-07-07T05:02:08.729Z Last Updated: 2025-07-07T17:08:27.269Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Portabilis i-Educar 2.9.0. It has been classified as problematic. Affected is an unknown function of the file /module/ComponenteCurricular/edit?id=ID of the component Curricular Components Module. The manipulation of the argument Nome leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early ab
nch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315024 - https://vuldb.com/?ctiid.315024 - https://vuldb.com/?submit.604879 - https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README15.md
CVE ID: CVE-2025-7114 State: PUBLISHED Published: 2025-07-07T05:32:05.686Z Last Updated: 2025-07-07T16:55:36.080Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SimStudioAI Products: sim Problem Types: CWE-306, CWE-287 Description: A vulnerability was found in SimStudioAI sim up to 37786d371e17d35e0764e1b5cd519d873d90d97b. It has been declared as critical. Affected by this vulnerability is the function POST of the file apps/sim/app/api/files/upload/route.ts of the component Session Handler. The manipulation of the argument Request leads to missing authentication. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
ssing authentication. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315025 - https://vuldb.com/?ctiid.315025 - https://vuldb.com/?submit.604898 - https://github.com/vri-report/reports/issues/3
CVE ID: CVE-2025-7115 State: PUBLISHED Published: 2025-07-07T06:02:07.544Z Last Updated: 2025-07-07T16:47:16.206Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:ND/RC:C) Vendors: rowboatlabs Products: rowboat Problem Types: CWE-306, CWE-287 Description: A vulnerability was found in rowboatlabs rowboat up to 8096eaf63b5a0732edd8f812bee05b78e214ee97. It has been rated as critical. Affected by this issue is the function PUT of the file apps/rowboat/app/api/uploads/[fileId]/route.ts of the component Session Handler. The manipulation of the argument params leads to missing authentication. The attack may be launched remotely. Continious delivery with rolling releases is used by this pr
issing authentication. The attack may be launched remotely. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. It is expected that this issue will be fixed in the near future. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315026 - https://vuldb.com/?ctiid.315026 - https://vuldb.com/?submit.604899 - https://github.com/rowboatlabs/rowboat/issues/166 - https://github.com/rowboatlabs/rowboat/issues/166#issuecomment-2995195594
CVE ID: CVE-2025-7116 State: PUBLISHED Published: 2025-07-07T06:32:05.568Z Last Updated: 2025-07-07T16:12:16.675Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: UTT Products: 进取 750W Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical has been found in UTT 进取 750W up to 3.2.2-191225. This affects an unknown part of the file /goform/Fast_wireless_conf. The manipulation of the argument ssid leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes:
be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315027 - https://vuldb.com/?ctiid.315027 - https://vuldb.com/?submit.605862 - https://github.com/d2pq/cve/blob/main/616/10.md - https://github.com/d2pq/cve/blob/main/616/10.md#poc
CVE ID: CVE-2025-7117 State: PUBLISHED Published: 2025-07-07T07:02:05.623Z Last Updated: 2025-07-07T16:10:07.178Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: UTT Products: HiPER 840G Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical was found in UTT HiPER 840G up to 3.1.1-190328. This vulnerability affects unknown code of the file /goform/websWhiteList. The manipulation of the argument addHostFilter leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst
nd may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315028 - https://vuldb.com/?ctiid.315028 - https://vuldb.com/?submit.605864 - https://github.com/d2pq/cve/blob/main/616/9.md - https://github.com/d2pq/cve/blob/main/616/9.md#poc
CVE ID: CVE-2025-7118 State: PUBLISHED Published: 2025-07-07T07:32:05.386Z Last Updated: 2025-07-07T16:02:11.010Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: UTT Products: HiPER 840G Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, has been found in UTT HiPER 840G up to 3.1.1-190328. This issue affects some unknown processing of the file /goform/formPictureUrl. The manipulation of the argument importpictureurl leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any
isclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315029 - https://vuldb.com/?ctiid.315029 - https://vuldb.com/?submit.605875 - https://github.com/d2pq/cve/blob/main/616/8.md - https://github.com/d2pq/cve/blob/main/616/8.md#poc
CVE ID: CVE-2025-7119 State: PUBLISHED Published: 2025-07-07T08:02:07.244Z Last Updated: 2025-07-07T15:12:59.385Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Complaint Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /users/index.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315031 - https://vuldb.com/?ctiid.315031 - https://vuldb.com/?submit.605911 - https://github.com/ez-lbz/poc/issues/42 - https://www.campcodes.com/
CVE ID: CVE-2025-7120 State: PUBLISHED Published: 2025-07-07T08:32:06.158Z Last Updated: 2025-07-15T14:58:55.170Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Complaint Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /users/check_availability.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
he exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315032 - https://vuldb.com/?ctiid.315032 - https://vuldb.com/?submit.605912 - https://github.com/ez-lbz/poc/issues/43 - https://www.campcodes.com/
CVE ID: CVE-2025-7121 State: PUBLISHED Published: 2025-07-07T09:02:06.154Z Last Updated: 2025-07-07T17:37:44.948Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Complaint Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Complaint Management System 1.0. It has been classified as critical. This affects an unknown part of the file /users/complaint-details.php. The manipulation of the argument cid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315033 - https://vuldb.com/?ctiid.315033 - https://vuldb.com/?submit.605913 - https://github.com/ez-lbz/poc/issues/44 - https://www.campcodes.com/
CVE ID: CVE-2025-7122 State: PUBLISHED Published: 2025-07-07T09:32:06.704Z Last Updated: 2025-07-07T17:25:05.747Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Complaint Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Complaint Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315034 - https://vuldb.com/?ctiid.315034 - https://vuldb.com/?submit.605914 - https://github.com/ez-lbz/poc/issues/45 - https://www.campcodes.com/
CVE ID: CVE-2025-7123 State: PUBLISHED Published: 2025-07-07T10:02:05.792Z Last Updated: 2025-07-07T12:04:44.151Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Complaint Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Complaint Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/complaint-details.php. The manipulation of the argument cid/uid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
xploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315035 - https://vuldb.com/?ctiid.315035 - https://vuldb.com/?submit.605927 - https://vuldb.com/?submit.605929 - https://github.com/y2xsec324/cve/issues/2 - https://www.campcodes.com/
CVE ID: CVE-2025-7124 State: PUBLISHED Published: 2025-07-07T10:32:05.464Z Last Updated: 2025-07-07T12:03:59.085Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Note Sharing Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical has been found in code-projects Online Note Sharing 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the component Profile Image Handler. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA A
ch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315036 - https://vuldb.com/?ctiid.315036 - https://vuldb.com/?submit.605925 - https://github.com/yihaofuweng/cve/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-7125 State: PUBLISHED Published: 2025-07-07T11:02:05.883Z Last Updated: 2025-07-07T13:59:55.297Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Employee Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in itsourcecode Employee Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/editempeducation.php. The manipulation of the argument coursepg leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichm
d remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315037 - https://vuldb.com/?ctiid.315037 - https://vuldb.com/?submit.605933 - https://github.com/manyufann/CVE/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-7126 State: PUBLISHED Published: 2025-07-07T11:32:06.388Z Last Updated: 2025-07-07T13:51:34.204Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Employee Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in itsourcecode Employee Management System up to 1.0. Affected by this issue is some unknown functionality of the file /admin/adminprofile.php. The manipulation of the argument AdminName leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP V
launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315038 - https://vuldb.com/?ctiid.315038 - https://vuldb.com/?submit.605934 - https://github.com/manyufann/CVE/issues/2 - https://itsourcecode.com/
CVE ID: CVE-2025-7127 State: PUBLISHED Published: 2025-07-07T12:02:06.086Z Last Updated: 2025-07-07T13:46:28.076Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Employee Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System up to 1.0. This affects an unknown part of the file /admin/changepassword.php. The manipulation of the argument currentpassword leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichmen
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315039 - https://vuldb.com/?ctiid.315039 - https://vuldb.com/?submit.605935 - https://github.com/manyufann/CVE/issues/3 - https://itsourcecode.com/
CVE ID: CVE-2025-7128 State: PUBLISHED Published: 2025-07-07T12:32:05.896Z Last Updated: 2025-07-07T13:42:16.744Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Payroll Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Campcodes Payroll Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=calculate_payroll. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315040 - https://vuldb.com/?ctiid.315040 - https://vuldb.com/?submit.605945 - https://github.com/wyl091256/CVE/issues/15 - https://www.campcodes.com/
CVE ID: CVE-2025-7129 State: PUBLISHED Published: 2025-07-07T13:02:07.028Z Last Updated: 2025-07-07T13:36:07.389Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Payroll Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.php?action=delete_employee_attendance_single. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
ly. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315041 - https://vuldb.com/?ctiid.315041 - https://vuldb.com/?submit.605946 - https://github.com/wyl091256/CVE/issues/16 - https://www.campcodes.com/
CVE ID: CVE-2025-7130 State: PUBLISHED Published: 2025-07-07T13:32:05.759Z Last Updated: 2025-07-07T13:46:55.765Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Payroll Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=delete_payroll. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
it has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315042 - https://vuldb.com/?ctiid.315042 - https://vuldb.com/?submit.605948 - https://github.com/wyl091256/CVE/issues/17 - https://www.campcodes.com/
CVE ID: CVE-2025-7131 State: PUBLISHED Published: 2025-07-07T14:02:05.679Z Last Updated: 2025-07-07T14:14:08.527Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Payroll Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Payroll Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=save_employee_attendance. The manipulation of the argument employee_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA
can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315043 - https://vuldb.com/?ctiid.315043 - https://vuldb.com/?submit.605949 - https://github.com/wyl091256/CVE/issues/19 - https://www.campcodes.com/
CVE ID: CVE-2025-7132 State: PUBLISHED Published: 2025-07-07T14:32:05.801Z Last Updated: 2025-07-07T14:47:25.689Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Payroll Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Payroll Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /ajax.php?action=save_payroll. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315044 - https://vuldb.com/?ctiid.315044 - https://vuldb.com/?submit.605950 - https://github.com/wyl091256/CVE/issues/20 - https://www.campcodes.com/
CVE ID: CVE-2025-7133 State: PUBLISHED Published: 2025-07-07T15:02:05.823Z Last Updated: 2025-07-07T19:12:28.350Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: CodeAstro Products: Online Movie Ticket Booking System Problem Types: CWE-352, CWE-862 Description: A vulnerability classified as problematic has been found in CodeAstro Online Movie Ticket Booking System 1.0. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315045 - https://v
d may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315045 - https://vuldb.com/?ctiid.315045 - https://vuldb.com/?submit.605947 - https://github.com/Vanshdhawan188/Online-Movie-Ticket-Booking-System-in-Python-/blob/main/Online%20Movie%20Ticket%20Booking%20System%20in%20Python.md - https://codeastro.com/
CVE ID: CVE-2025-7134 State: PUBLISHED Published: 2025-07-07T15:32:06.081Z Last Updated: 2025-07-07T15:50:07.195Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Recruitment Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=delete_application. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichmen
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315046 - https://vuldb.com/?ctiid.315046 - https://vuldb.com/?submit.605952 - https://github.com/wyl091256/CVE/issues/21 - https://www.campcodes.com/