Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-9749 State: PUBLISHED Published: 2025-08-31T22:32:06.213Z Last Updated: 2025-09-02T15:12:43.226Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: HKritesh009 Products: Grocery List Management Web App Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in HKritesh009 Grocery List Management Web App up to f491b681eb70d465f445c9a721415c965190f83b. This affects an unknown part of the file /src/update.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. This product is using a rolling release to provide continious del
. The exploit is publicly available and might be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322050 - https://vuldb.com/?ctiid.322050 - https://vuldb.com/?submit.640488 - https://gist.github.com/0xSebin/a163239e0132d7d58ef1300f321da819 - https://gist.github.com/0xSebin/a163239e0132d7d58ef1300f321da819#steps-to-reproduce
CVE ID: CVE-2025-9750 State: PUBLISHED Published: 2025-08-31T23:02:07.436Z Last Updated: 2025-09-02T15:12:31.359Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Learning Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
en released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322051 - https://vuldb.com/?ctiid.322051 - https://vuldb.com/?submit.640557 - https://github.com/gggg6886/CVE/issues/2 - https://www.campcodes.com/
CVE ID: CVE-2025-9751 State: PUBLISHED Published: 2025-08-31T23:32:06.751Z Last Updated: 2025-09-02T15:12:26.094Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Learning Management System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in Campcodes Online Learning Management System 1.0. This issue affects some unknown processing of the file /login.php. This manipulation of the argument Username causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
o the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322052 - https://vuldb.com/?ctiid.322052 - https://vuldb.com/?submit.640583 - https://github.com/HAO-RAY/HCR-CVE/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-9752 State: PUBLISHED Published: 2025-09-01T00:02:06.532Z Last Updated: 2025-09-02T15:12:20.656Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-852 Problem Types: CWE-78, CWE-77 Description: A security vulnerability has been detected in D-Link DIR-852 1.00CN B09. Impacted is the function soapcgi_main of the file soap.cgi of the component SOAP Service. Such manipulation of the argument service leads to os command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst N
y be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322053 - https://vuldb.com/?ctiid.322053 - https://vuldb.com/?submit.640590 - https://github.com/i-Corner/cve/issues/18 - https://www.dlink.com/
CVE ID: CVE-2025-9753 State: PUBLISHED Published: 2025-09-01T00:32:06.804Z Last Updated: 2025-09-02T15:12:14.664Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Hospital Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was detected in Campcodes Online Hospital Management System 1.0. The affected element is an unknown function of the file /admin/patient-search.php of the component Patient Search Module. Performing manipulation of the argument Search by Name Mobile No results in cross site scripting. The attack may be initiated remotely. The exploit is now public and may be used. Additional Analyst Notes: -
scripting. The attack may be initiated remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322054 - https://vuldb.com/?ctiid.322054 - https://vuldb.com/?submit.640609 - https://github.com/Yashh-G/zero-day-research/blob/main/HMS_XSS_In_Patient_search_Feild.pdf - https://www.campcodes.com/
CVE ID: CVE-2025-9754 State: PUBLISHED Published: 2025-09-01T01:02:07.624Z Last Updated: 2025-09-02T15:12:09.182Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Hospital Management System Problem Types: CWE-79, CWE-94 Description: A flaw has been found in Campcodes Online Hospital Management System 1.0. The impacted element is an unknown function of the file /edit-profile.php of the component Edit Profile Page. Executing manipulation of the argument Username can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References
remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322055 - https://vuldb.com/?ctiid.322055 - https://vuldb.com/?submit.640616 - https://github.com/Yashh-G/zero-day-research/blob/main/HMS_Stored_XSS_In_UserName_Field.pdf - https://www.campcodes.com/
CVE ID: CVE-2025-9755 State: PUBLISHED Published: 2025-09-01T01:32:05.850Z Last Updated: 2025-09-02T15:11:59.321Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Khanakag-17 Products: Library Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in Khanakag-17 Library Management System up to 60ed174506094dcd166e34904a54288e5d10ff24. This affects an unknown function of the file /index.php. The manipulation of the argument msg leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. This product follows a rolling release approach for continuous d
ploit has been disclosed to the public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322056 - https://vuldb.com/?ctiid.322056 - https://vuldb.com/?submit.640660 - https://gist.github.com/0xSebin/147e7f57daf7f270d957927892b0a51d
CVE ID: CVE-2025-9756 State: PUBLISHED Published: 2025-09-01T02:02:07.067Z Last Updated: 2025-09-02T15:11:48.108Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: User Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul User Management System 1.0. This impacts an unknown function of the file /admin/change-emailid.php. The manipulation of the argument uid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322057 - https://vuldb.com/?ctiid.322057
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322057 - https://vuldb.com/?ctiid.322057 - https://vuldb.com/?submit.640661 - https://github.com/CSentinel/CVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-9757 State: PUBLISHED Published: 2025-09-01T02:32:06.576Z Last Updated: 2025-09-02T15:11:41.761Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes, SourceCodester Products: Courier Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in Campcodes/SourceCodester Courier Management System 1.0. Affected is the function Login of the file /ajax.php. This manipulation of the argument email causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
icly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322058 - https://vuldb.com/?ctiid.322058 - https://vuldb.com/?submit.640675 - https://vuldb.com/?submit.640811 - https://github.com/lrjbsyh/CVE_Hunter/issues/8#issue-3348441601
CVE ID: CVE-2025-9758 State: PUBLISHED Published: 2025-09-01T03:02:06.952Z Last Updated: 2025-09-02T15:11:36.675Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: deepakmisal24 Products: Chemical Inventory Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in deepakmisal24 Chemical Inventory Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /inventory_form.php. Such manipulation of the argument chem_name leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
from remote. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322059 - https://vuldb.com/?ctiid.322059 - https://vuldb.com/?submit.640676 - https://gist.github.com/0xSebin/29cb8e043974d996509522cdb738edc6 - https://gist.github.com/0xSebin/29cb8e043974d996509522cdb738edc6#proof-of-concept-poc
CVE ID: CVE-2025-9759 State: PUBLISHED Published: 2025-09-01T03:32:06.223Z Last Updated: 2025-09-02T15:11:30.691Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes, SourceCodester Products: Courier Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in Campcodes/SourceCodester Courier Management System 1.0. Affected by this issue is the function Signup of the file /ajax.php. Performing manipulation of the argument lastname results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment
ely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322060 - https://vuldb.com/?ctiid.322060 - https://vuldb.com/?submit.640684 - https://github.com/lrjbsyh/CVE_Hunter/issues/9#issue-3348584620
CVE ID: CVE-2025-9760 State: PUBLISHED Published: 2025-09-01T04:02:06.278Z Last Updated: 2025-09-17T15:24:36.439Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-285, CWE-266 Description: A weakness has been identified in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/Api/matricula of the component Matricula API. Executing manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.32206
lic and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322061 - https://vuldb.com/?ctiid.322061 - https://vuldb.com/?submit.640690 - https://vuldb.com/?submit.643575 - https://vuldb.com/?submit.648827 - https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-9760.md - https://github.com/marcelomulder/CVE/blob/main/i-educar/Broken%20Function%20Level%20Authorization%20on%20%60matricula%60%20API%20allows%20deletion%20of%20%E2%80%9Cabandono%E2%80%9D%20status.md#proof-of-concept-poc
CVE ID: CVE-2025-9761 State: PUBLISHED Published: 2025-09-01T04:32:07.141Z Last Updated: 2025-09-02T15:11:19.817Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Feeds Product Inventory System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in Campcodes Online Feeds Product Inventory System 1.0. This vulnerability affects unknown code of the file /feeds/index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322062 - https://vuldb.com/?ctiid.322062 - https://vuldb.com/?submit.640708 - https://github.com/HAO-RAY/HCR-CVE/issues/2 - https://www.campcodes.com/
CVE ID: CVE-2025-9762 State: PUBLISHED Published: 2025-09-30T03:35:28.206Z Last Updated: 2025-09-30T15:27:13.460Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: westi Products: Post By Email Problem Types: CWE-78 Description: The Post By Email plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the save_attachments function in all versions up to, and including, 1.0.4b. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.
remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/885eb923-8e69-416b-8494-a42a9465cfe0?source=cve - https://plugins.trac.wordpress.org/browser/post-by-email/tags/1.0.4b/class-post-by-email.php#L702
CVE ID: CVE-2025-9763 State: PUBLISHED Published: 2025-09-01T05:02:06.653Z Last Updated: 2025-09-02T15:11:13.589Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Learning Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in Campcodes Online Learning Management System 1.0. This issue affects some unknown processing of the file /student_signup.php. The manipulation of the argument Username results in sql injection. The attack can be launched remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322063 - https://v
d may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322063 - https://vuldb.com/?ctiid.322063 - https://vuldb.com/?submit.640747 - https://github.com/gggg6886/CVE/issues/3 - https://www.campcodes.com/
CVE ID: CVE-2025-9764 State: PUBLISHED Published: 2025-09-01T05:32:07.004Z Last Updated: 2025-09-02T15:11:07.889Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Sports Management System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in itsourcecode Sports Management System 1.0. Impacted is an unknown function of the file /Admin/resultdetails.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322064 - https://vuldb.com/?ctiid.322064 - htt
alyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322064 - https://vuldb.com/?ctiid.322064 - https://vuldb.com/?submit.640770 - https://github.com/zws128/cve/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-9765 State: PUBLISHED Published: 2025-09-01T06:02:07.242Z Last Updated: 2025-09-02T15:11:00.948Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Sports Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in itsourcecode Sports Management System 1.0. The affected element is an unknown function of the file /Admin/tournament_details.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.32206
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322065 - https://vuldb.com/?ctiid.322065 - https://vuldb.com/?submit.641111 - https://github.com/zzb1388/cve/issues/60 - https://itsourcecode.com/
CVE ID: CVE-2025-9766 State: PUBLISHED Published: 2025-09-01T06:32:07.553Z Last Updated: 2025-09-02T15:10:55.168Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Sports Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in itsourcecode Sports Management System 1.0. The impacted element is an unknown function of the file /Admin/facilitator.php. Performing manipulation of the argument code results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322066
public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322066 - https://vuldb.com/?ctiid.322066 - https://vuldb.com/?submit.641112 - https://github.com/zzb1388/cve/issues/59 - https://itsourcecode.com/
CVE ID: CVE-2025-9767 State: PUBLISHED Published: 2025-09-01T07:02:06.815Z Last Updated: 2025-09-02T15:10:46.084Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Sports Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in itsourcecode Sports Management System 1.0. This affects an unknown function of the file /Admin/sporttype.php. Executing manipulation of the argument code can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322067 - https:/
may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322067 - https://vuldb.com/?ctiid.322067 - https://vuldb.com/?submit.641113 - https://github.com/zzb1388/cve/issues/58 - https://itsourcecode.com/
CVE ID: CVE-2025-9768 State: PUBLISHED Published: 2025-09-01T07:32:07.339Z Last Updated: 2025-09-02T15:10:40.139Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:ND/RC:UR) Vendors: itsourcecode Products: Sports Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in itsourcecode Sports Management System 1.0. This impacts an unknown function of the file /Admin/mode.php. The manipulation of the argument code leads to sql injection. The attack is possible to be carried out remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322068 - https://vuldb.com/?ctiid.322068 - https://vuldb.com/?submit.641753 -
ment: References: - https://vuldb.com/?id.322068 - https://vuldb.com/?ctiid.322068 - https://vuldb.com/?submit.641753 - https://github.com/hjsjbsg/record-for-own/issues/2 - https://itsourcecode.com/
CVE ID: CVE-2025-9769 State: PUBLISHED Published: 2025-09-01T08:02:07.559Z Last Updated: 2025-09-02T15:10:33.441Z Severity: N/A (CVSS 4.3 AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DI-7400G+ Problem Types: CWE-77, CWE-74 Description: A security flaw has been discovered in D-Link DI-7400G+ 19.12.25A1. Affected is the function sub_478D28 of the file /mng_platform.asp. The manipulation of the argument addr with the input `echo 12345 > poc.txt` results in command injection. An attack on the physical device is feasible. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322069 - https://vuldb.com/?ctiid.322069 - https://vuldb.com/?submit.640779 - https://github.com/xyh4ck/iot_poc - https://github.com/xyh4ck/iot_poc#vulnerability-verification-process - https://www.dlink.com/
CVE ID: CVE-2025-9770 State: PUBLISHED Published: 2025-09-01T08:32:08.647Z Last Updated: 2025-09-02T15:10:27.470Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Hospital Management System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in Campcodes Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ of the component Admin Dashboard Login. This manipulation of the argument Password causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA AD
remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322070 - https://vuldb.com/?ctiid.322070 - https://vuldb.com/?submit.640807 - https://github.com/Yashh-G/zero-day-research/blob/main/HMS_Admin_Auth_Bypass.pdf - https://www.campcodes.com/
CVE ID: CVE-2025-9771 State: PUBLISHED Published: 2025-09-01T09:02:07.224Z Last Updated: 2025-09-02T15:10:22.335Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Eye Clinic Management System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in SourceCodester Eye Clinic Management System 1.0. Affected by this issue is some unknown functionality of the file /main/search_index_Diagnosis.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichmen
tack remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.322071 - https://vuldb.com/?ctiid.322071 - https://vuldb.com/?submit.640865 - https://github.com/WHOAMI-xiaoyu/CVE/blob/main/CVE_3.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-9772 State: PUBLISHED Published: 2025-09-01T09:32:06.499Z Last Updated: 2025-09-02T15:10:17.111Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: n/a Products: RemoteClinic Problem Types: CWE-434, CWE-284 Description: A vulnerability was detected in RemoteClinic up to 2.0. This affects an unknown part of the file /staff/edit.php. Performing manipulation of the argument image results in unrestricted upload. The attack can be initiated remotely. The exploit is now public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://