Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-10594 State: PUBLISHED Published: 2025-09-17T14:02:08.224Z Last Updated: 2025-09-17T14:47:39.250Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Student File Management System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in SourceCodester Online Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/delete_student.php. Executing manipulation of the argument stud_id can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
the attack remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324611 - https://vuldb.com/?ctiid.324611 - https://vuldb.com/?submit.649224 - https://github.com/qcycop0101-hash/CVE/issues/14 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10595 State: PUBLISHED Published: 2025-09-17T14:32:09.159Z Last Updated: 2025-09-17T15:08:43.525Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Student File Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in SourceCodester Online Student File Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/delete_user.php. The manipulation of the argument user_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
ly. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324612 - https://vuldb.com/?ctiid.324612 - https://vuldb.com/?submit.649232 - https://github.com/qcycop0101-hash/CVE/issues/15 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10596 State: PUBLISHED Published: 2025-09-17T15:02:06.821Z Last Updated: 2025-09-17T15:13:19.846Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Exam Form Submission Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Online Exam Form Submission 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument usn results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324613 - https://vuldb.com/?ctiid.324613
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324613 - https://vuldb.com/?ctiid.324613 - https://vuldb.com/?submit.649315 - https://github.com/qcycop0101-hash/CVE/issues/16 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10597 State: PUBLISHED Published: 2025-09-17T15:32:05.161Z Last Updated: 2025-09-17T17:44:17.999Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:ND/RC:UR) Vendors: kidaze Products: CourseSelectionSystem Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This vulnerability affects unknown code of the file /Profilers/PriProfile/COUNT2.php. This manipulation of the argument cname causes sql injection. The attack may be initiated remotely. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected
duct uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324614 - https://vuldb.com/?ctiid.324614 - https://vuldb.com/?submit.649316 - https://github.com/shang-hh/shang/blob/main/sql.txt
CVE ID: CVE-2025-10598 State: PUBLISHED Published: 2025-09-17T16:02:07.839Z Last Updated: 2025-09-17T16:19:54.732Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Pet Grooming Management Software Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This issue affects some unknown processing of the file /admin/search_product.php. Such manipulation of the argument group_id leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324615 - https://vuldb.com/?ctiid.324615 - https://vuldb.com/?submit.649317 - https://github.com/Jacob-z691/CVE/issues/3 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10599 State: PUBLISHED Published: 2025-09-17T16:02:10.787Z Last Updated: 2025-09-17T16:19:20.211Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Web-Based Internet Laboratory Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in itsourcecode Web-Based Internet Laboratory Management System 1.0. Impacted is the function User::AuthenticateUser of the file login.php. Performing manipulation of the argument user_email results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited. Additional Analyst Notes:
of the attack is possible. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324616 - https://vuldb.com/?ctiid.324616 - https://vuldb.com/?submit.649501 - https://github.com/drew-byte/Web-Based-Internet-Laboratory-Management-System_SQLi-PoC/blob/main/README.md - https://itsourcecode.com/
CVE ID: CVE-2025-10600 State: PUBLISHED Published: 2025-09-17T16:32:07.952Z Last Updated: 2025-09-18T14:40:51.756Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Exam Form Submission Problem Types: CWE-434, CWE-284 Description: A flaw has been found in SourceCodester Online Exam Form Submission 1.0. This impacts an unknown function of the file /register.php. This manipulation of the argument img causes unrestricted upload. It is possible to initiate the attack remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324620 - https://vuldb.com
used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324620 - https://vuldb.com/?ctiid.324620 - https://vuldb.com/?submit.649541 - https://github.com/qcycop0101-hash/CVE/issues/18 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10601 State: PUBLISHED Published: 2025-09-17T16:32:10.812Z Last Updated: 2025-09-18T14:40:46.322Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Exam Form Submission Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in SourceCodester Online Exam Form Submission 1.0. Affected is an unknown function of the file /admin/index.php. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324621
e public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324621 - https://vuldb.com/?ctiid.324621 - https://vuldb.com/?submit.649542 - https://github.com/qcycop0101-hash/CVE/issues/19 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10602 State: PUBLISHED Published: 2025-09-17T17:02:06.637Z Last Updated: 2025-09-18T14:40:40.073Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Exam Form Submission Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/delete_s1.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
as been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324622 - https://vuldb.com/?ctiid.324622 - https://vuldb.com/?submit.649543 - https://github.com/qcycop0101-hash/CVE/issues/20 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10603 State: PUBLISHED Published: 2025-09-17T17:02:16.847Z Last Updated: 2025-09-18T14:40:34.216Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Online Discussion Forum Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in PHPGurukul Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_forum/search_result.php. Executing manipulation of the argument Search can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324623 - https://vuldb.com/?ctiid.324623 - https://vuldb.com/?submit.649867 - https://github.com/maximdevere/cve/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-10604 State: PUBLISHED Published: 2025-09-17T17:32:07.195Z Last Updated: 2025-09-17T19:50:18.518Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Online Discussion Forum Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in PHPGurukul Online Discussion Forum 1.0. This affects an unknown part of the file /admin/edit_member.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324624 - https://vuldb.com/?ctiid.324624
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324624 - https://vuldb.com/?ctiid.324624 - https://vuldb.com/?submit.649868 - https://github.com/maximdevere/cve/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-10605 State: PUBLISHED Published: 2025-09-17T17:32:10.038Z Last Updated: 2025-09-17T19:56:26.175Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-79, CWE-94 Description: A security flaw has been discovered in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /agenda_preferencias.php. The manipulation of the argument tipoacao results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324625 - https://vuld
exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324625 - https://vuldb.com/?ctiid.324625 - https://vuldb.com/?submit.649872 - https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10605.md - https://github.com/marcelomulder/CVE/blob/main/i-educar/Cross-Site%20Scripting%20(XSS)%20Reflected%20endpoint%20%60agenda_preferencias.php%60%20parameter%20%60tipoacao%60.md
CVE ID: CVE-2025-10606 State: PUBLISHED Published: 2025-09-17T18:02:05.701Z Last Updated: 2025-09-17T18:17:37.041Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-79, CWE-94 Description: A weakness has been identified in Portabilis i-Educar up to 2.10. This issue affects some unknown processing of the file /module/Configuracao/ConfiguracaoMovimentoGeral. This manipulation of the argument tipoacao causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324626 - https://vuldb.com/?ctiid.324626 - https://vuldb.com/?submit.649874 - https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10606.md - https://github.com/marcelomulder/CVE/blob/main/i-educar/Cross-Site%20Scripting%20(XSS)%20Reflected%20endpoint%20%60.module.Configuracao.ConfiguracaoMovimentoGeral%60%20parameter%20%60tipoacao%60.md
CVE ID: CVE-2025-10607 State: PUBLISHED Published: 2025-09-17T18:02:08.098Z Last Updated: 2025-09-17T18:14:33.653Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: Portabilis Products: i-Educar Problem Types: CWE-200, CWE-284 Description: A security vulnerability has been detected in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /module/Avaliacao/diarioApi. Such manipulation leads to information disclosure. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324627 - https://vuldb.com/?cti
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324627 - https://vuldb.com/?ctiid.324627 - https://vuldb.com/?submit.649875 - https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10607.md - https://github.com/marcelomulder/CVE/blob/main/i-educar/Broken%20Object%20Level%20Authorization%20(BOLA)%20allows%20enumeration%20of%20classes%20informations%20via%20.module.Avaliacao.diarioApi.md
CVE ID: CVE-2025-10608 State: PUBLISHED Published: 2025-09-17T18:32:06.307Z Last Updated: 2025-09-18T17:35:19.043Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-284, CWE-266 Description: A vulnerability was detected in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /enrollment-history/. Performing manipulation results in improper access controls. The attack is possible to be carried out remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324628 - https://vuldb.com/?ctiid.324628 - http
lyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324628 - https://vuldb.com/?ctiid.324628 - https://vuldb.com/?submit.649876 - https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10608.md - https://github.com/marcelomulder/CVE/blob/main/i-educar/Broken%20Access%20Control%20Vulnerability%20%20in%20%60.enrollment-history.(ID)%60%20Endpoint.md
CVE ID: CVE-2025-10609 State: PUBLISHED Published: 2025-10-03T12:02:41.289Z Last Updated: 2025-10-03T13:51:42.306Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L) Vendors: Logo Software Inc. Products: TigerWings ERP Problem Types: CWE-798 Description: Use of Hard-coded Credentials vulnerability in Logo Software Inc. TigerWings ERP allows Read Sensitive Constants Within an Executable.This issue affects TigerWings ERP: from 01.01.00 before 3.03.00. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0313
CVE ID: CVE-2025-10610 State: PUBLISHED Published: 2025-10-14T12:43:37.800Z Last Updated: 2025-10-14T13:12:26.765Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: SFS Consulting Information Processing Industry and Foreign Trade Inc. Products: Winsure Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SFS Consulting Information Processing Industry and Foreign Trade Inc. Winsure allows Blind SQL Injection.This issue affects Winsure: through Version dated 21.08.2025. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0337
CVE ID: CVE-2025-10611 State: PUBLISHED Published: 2025-10-16T12:09:31.802Z Last Updated: 2025-10-16T13:34:31.799Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: WSO2 Products: WSO2 API Manager, WSO2 API Control Plane, WSO2 Open Banking AM, WSO2 Open Banking IAM, WSO2 Identity Server, WSO2 Identity Server as Key Manager, WSO2 Open Banking KM, WSO2 Universal Gateway, WSO2 Traffic Manager, org.wso2.carbon.identity.auth.rest:org.wso2.carbon.identity.auth.service, org.wso2.carbon.identity.auth.rest:org.wso2.carbon.identity.auth.valve Description: Due to an insufficient access control implementation in multiple WSO2 Products, authentication and authorization c
tion: Due to an insufficient access control implementation in multiple WSO2 Products, authentication and authorization checks for certain REST APIs can be bypassed, allowing them to be invoked without proper validation. Successful exploitation of this vulnerability could lead to a malicious actor gaining administrative access and performing unauthenticated and unauthorized administrative operations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-4585/
CVE ID: CVE-2025-10612 State: PUBLISHED Published: 2025-10-21T08:48:37.909Z Last Updated: 2025-10-23T12:45:14.372Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: giSoft Information Technologies Products: City Guide Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in giSoft Information Technologies City Guide allows Reflected XSS.This issue affects City Guide: before 1.4.45. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0350
CVE ID: CVE-2025-10613 State: PUBLISHED Published: 2025-09-17T19:02:06.337Z Last Updated: 2025-09-17T19:41:28.737Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Student Information System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /leveledit1.php. Such manipulation of the argument level_id leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3246
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324639 - https://vuldb.com/?ctiid.324639 - https://vuldb.com/?submit.649898 - https://github.com/jianx0i/CVE/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-10614 State: PUBLISHED Published: 2025-09-17T19:32:06.431Z Last Updated: 2025-09-17T19:42:25.910Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: E-Logbook with Health Monitoring System for COVID-19 Problem Types: CWE-79, CWE-94 Description: A vulnerability was determined in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0 on COVID. This affects an unknown function of the file /print_reports_prev.php. Executing manipulation of the argument profile_id can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. Additional Ana
t is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324641 - https://vuldb.com/?ctiid.324641 - https://vuldb.com/?submit.649910 - https://github.com/yihaofuweng/cve/issues/22 - https://itsourcecode.com/
CVE ID: CVE-2025-10615 State: PUBLISHED Published: 2025-09-17T20:02:07.388Z Last Updated: 2025-09-18T15:40:41.046Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: E-Commerce Website Problem Types: CWE-434, CWE-284 Description: A vulnerability was identified in itsourcecode E-Commerce Website 1.0. This impacts an unknown function of the file /admin/products.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324642 - https://vuldb.com/?ctiid.324642 - https://vuldb.
: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324642 - https://vuldb.com/?ctiid.324642 - https://vuldb.com/?submit.649911 - https://github.com/yihaofuweng/cve/issues/23 - https://itsourcecode.com/
CVE ID: CVE-2025-10616 State: PUBLISHED Published: 2025-09-17T20:32:06.815Z Last Updated: 2025-09-18T15:40:10.078Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: E-Commerce Website Problem Types: CWE-434, CWE-284 Description: A security flaw has been discovered in itsourcecode E-Commerce Website 1.0. Affected is an unknown function of the file /admin/users.php. The manipulation results in unrestricted upload. The attack can be launched remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324643 - https://vuldb.com/?ctiid.324643 -
l Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324643 - https://vuldb.com/?ctiid.324643 - https://vuldb.com/?submit.649912 - https://github.com/yihaofuweng/cve/issues/24 - https://itsourcecode.com/
CVE ID: CVE-2025-10617 State: PUBLISHED Published: 2025-09-17T20:32:10.044Z Last Updated: 2025-09-18T14:36:03.801Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Polling System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in SourceCodester Online Polling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/positions.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
lable to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.324644 - https://vuldb.com/?ctiid.324644 - https://vuldb.com/?submit.649948 - https://vuldb.com/?submit.649958 - https://github.com/ganzhi-qcy/cve/issues/23 - https://github.com/ganzhi-qcy/cve/issues/27 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10618 State: PUBLISHED Published: 2025-09-17T21:02:07.663Z Last Updated: 2025-09-18T14:34:35.891Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Online Clinic Management System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in itsourcecode Online Clinic Management System 1.0. Affected by this issue is some unknown functionality of the file transact.php. Such manipulation of the argument firstname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Other parameters might be affected as well. Additional Analyst Notes: -