Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311009 - https://vuldb.com/?ctiid.311009 - https://vuldb.com/?submit.587476 - https://github.com/f1rstb100d/myCVE/issues/34 - https://phpgurukul.com/
CVE ID: CVE-2025-5559 State: PUBLISHED Published: 2025-06-26T02:06:36.250Z Last Updated: 2025-06-26T13:25:44.156Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: neoxx Products: TimeZoneCalculator Problem Types: CWE-79 Description: The TimeZoneCalculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'timezonecalculator_output' shortcode in all versions up to, and including, 3.37 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute wheneve
d attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f1e1a9ab-9ba9-45ff-aecd-b8953abc653a?source=cve - https://wordpress.org/plugins/timezonecalculator/
CVE ID: CVE-2025-5560 State: PUBLISHED Published: 2025-06-04T04:00:31.512Z Last Updated: 2025-06-04T13:46:28.386Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Curfew e-Pass Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /index.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
osed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311010 - https://vuldb.com/?ctiid.311010 - https://vuldb.com/?submit.587542 - https://github.com/f1rstb100d/myCVE/issues/35 - https://phpgurukul.com/
CVE ID: CVE-2025-5561 State: PUBLISHED Published: 2025-06-04T04:31:06.740Z Last Updated: 2025-06-04T13:45:42.744Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Curfew e-Pass Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/view-pass-detail.php. The manipulation of the argument viewid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
y. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311011 - https://vuldb.com/?ctiid.311011 - https://vuldb.com/?submit.587543 - https://github.com/f1rstb100d/myCVE/issues/36 - https://phpgurukul.com/
CVE ID: CVE-2025-5562 State: PUBLISHED Published: 2025-06-04T05:00:19.728Z Last Updated: 2025-06-04T13:27:56.744Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Curfew e-Pass Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/edit-category-detail.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
e exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311012 - https://vuldb.com/?ctiid.311012 - https://vuldb.com/?submit.587544 - https://github.com/f1rstb100d/myCVE/issues/37 - https://phpgurukul.com/
CVE ID: CVE-2025-5563 State: PUBLISHED Published: 2025-06-06T06:42:54.692Z Last Updated: 2025-06-06T16:08:21.175Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: cyberscorp Products: WP-Addpub Problem Types: CWE-89 Description: The WP-Addpub plugin for WordPress is vulnerable to SQL Injection via the 'wp-addpub' shortcode in all versions up to, and including, 1.2.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to
Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f8945eed-eee4-4043-b6ab-d1ea553a4a23?source=cve - https://plugins.trac.wordpress.org/browser/wp-addpub/trunk/wp-addpub.php#L541 - https://plugins.trac.wordpress.org/browser/wp-addpub/trunk/wp-addpub.php#L57
CVE ID: CVE-2025-5564 State: PUBLISHED Published: 2025-06-26T02:06:35.156Z Last Updated: 2025-06-26T13:35:50.457Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: gurievcreative Products: GC Social Wall Problem Types: CWE-79 Description: The GC Social Wall plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gc_social_wall' shortcode in all versions up to, and including, 1.15 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user a
s, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/cfe548ce-5dc9-4073-b755-d28e37720808?source=cve - https://plugins.svn.wordpress.org/gc-social-wall/trunk/GCSocialWall.php
CVE ID: CVE-2025-5565 State: PUBLISHED Published: 2025-06-06T06:42:53.549Z Last Updated: 2025-06-06T16:08:39.308Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: jason-lau Products: Hide It Problem Types: CWE-79 Description: The Hide It plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'hideit' shortcode in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c3d62ac3-7980-4817-ab22-e5d0a6a10d84?source=cve - https://plugins.svn.wordpress.org/hide-it/tags/1.0.1/plugin.php
CVE ID: CVE-2025-5566 State: PUBLISHED Published: 2025-06-04T05:00:23.572Z Last Updated: 2025-06-04T13:27:07.903Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Notice Board System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Notice Board System 1.0. This affects an unknown part of the file /search-notice.php. The manipulation of the argument searchdata leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311013 - https://vuldb
y be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311013 - https://vuldb.com/?ctiid.311013 - https://vuldb.com/?submit.587623 - https://github.com/f1rstb100d/myCVE/issues/38 - https://phpgurukul.com/
CVE ID: CVE-2025-5567 State: PUBLISHED Published: 2025-07-04T02:22:33.158Z Last Updated: 2025-07-07T15:01:49.941Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: gn_themes Products: WP Shortcodes Plugin — Shortcodes Ultimate Problem Types: CWE-79 Description: The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data-url' DOM element attribute in all versions up to, and including, 7.4.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will exec
uthenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/fbd67145-5b95-4890-a265-1dd7a029aec6?source=cve - https://plugins.trac.wordpress.org/browser/shortcodes-ultimate/tags/7.4.0/includes/js/shortcodes/index.js
CVE ID: CVE-2025-5568 State: PUBLISHED Published: 2025-06-07T11:17:50.949Z Last Updated: 2025-06-09T16:02:02.175Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: magepeopleteam Products: Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin Problem Types: CWE-79 Description: The WpEvently plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions up to, and including, 4.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will exec
uthenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a3659c4d-3a19-4f74-9f6d-26d7b24ebe56?source=cve - https://wordpress.org/plugins/mage-eventpress/#developers - https://github.com/magepeopleteam/mage-eventpress/commit/c6f8d3233087881d3eb7ed3ebe9a6ebc7795f144 - https://plugins.trac.wordpress.org/changeset/3307484
CVE ID: CVE-2025-5569 State: PUBLISHED Published: 2025-06-04T05:31:51.903Z Last Updated: 2025-06-04T13:26:04.435Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: IdeaCMS Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in IdeaCMS up to 1.7 and classified as critical. This issue affects the function Article/Goods of the file /api/v1.index.article/getList.html. The manipulation of the argument Field leads to sql injection. The attack may be initiated remotely. Upgrading to version 1.8 is able to address this issue. The patch is named 935aceb4c21338633de6d41e13332f7b9db4fa6a. It is recommended to upgrade the affected component. Additional Analyst N
amed 935aceb4c21338633de6d41e13332f7b9db4fa6a. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311027 - https://vuldb.com/?ctiid.311027 - https://vuldb.com/?submit.588372 - https://gitee.com/ideacms/ideacms/issues/ICBVWE - https://gitee.com/ideacms/ideacms/issues/ICBVWE#note_42016626_link - https://gitee.com/ideacms/ideacms/commit/935aceb4c21338633de6d41e13332f7b9db4fa6a - https://gitee.com/ideacms/ideacms/releases/tag/v1.8
CVE ID: CVE-2025-5570 State: PUBLISHED Published: 2025-07-08T01:43:47.424Z Last Updated: 2025-07-08T16:12:46.075Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: tigroumeow Products: AI Engine Problem Types: CWE-79 Description: The AI Engine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the mwai_chatbot shortcode 'id' parameter in all versions up to, and including, 2.8.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Ana
ve, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a32dcf96-ec75-46b1-8f1d-608411ad5147?source=cve - https://plugins.trac.wordpress.org/browser/ai-engine/tags/2.8.2/classes/modules/chatbot.php#L617
CVE ID: CVE-2025-5571 State: PUBLISHED Published: 2025-06-04T05:31:53.898Z Last Updated: 2025-06-04T13:24:36.159Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: D-Link Products: DCS-932L Problem Types: CWE-78, CWE-77 Description: A vulnerability was found in D-Link DCS-932L 2.18.01. It has been classified as critical. Affected is the function setSystemAdmin of the file /setSystemAdmin. The manipulation of the argument AdminID leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: -
d. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311028 - https://vuldb.com/?ctiid.311028 - https://vuldb.com/?submit.588465 - https://github.com/wudipjq/my_vuln/blob/main/D-Link5/vuln_42/42.md - https://www.dlink.com/
CVE ID: CVE-2025-5572 State: PUBLISHED Published: 2025-06-04T06:00:13.471Z Last Updated: 2025-06-04T13:45:55.834Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: D-Link Products: DCS-932L Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in D-Link DCS-932L 2.18.01. It has been declared as critical. Affected by this vulnerability is the function setSystemEmail of the file /setSystemEmail. The manipulation of the argument EmailSMTPPortNumber leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer
d to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311029 - https://vuldb.com/?ctiid.311029 - https://vuldb.com/?submit.588466 - https://github.com/wudipjq/my_vuln/blob/main/D-Link5/vuln_43/43.md - https://www.dlink.com/
CVE ID: CVE-2025-5573 State: PUBLISHED Published: 2025-06-04T06:00:18.187Z Last Updated: 2025-06-04T13:42:49.227Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: D-Link Products: DCS-932L Problem Types: CWE-78, CWE-77 Description: A vulnerability was found in D-Link DCS-932L 2.18.01. It has been rated as critical. Affected by this issue is the function setSystemWizard/setSystemControl of the file /setSystemWizard. The manipulation of the argument AdminID leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additiona
blic and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311030 - https://vuldb.com/?ctiid.311030 - https://vuldb.com/?submit.588467 - https://github.com/wudipjq/my_vuln/blob/main/D-Link5/vuln_44/44.md - https://www.dlink.com/
CVE ID: CVE-2025-5574 State: PUBLISHED Published: 2025-06-04T06:31:06.828Z Last Updated: 2025-06-04T13:17:15.813Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Dairy Farm Shop Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Dairy Farm Shop Management System 1.3. This affects an unknown part of the file /add-company.php. The manipulation of the argument companyname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
closed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311031 - https://vuldb.com/?ctiid.311031 - https://vuldb.com/?submit.588778 - https://github.com/FLYFISH567/CVE/issues/9 - https://phpgurukul.com/
CVE ID: CVE-2025-5575 State: PUBLISHED Published: 2025-06-04T07:00:18.872Z Last Updated: 2025-06-04T13:41:39.685Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Dairy Farm Shop Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Dairy Farm Shop Management System 1.3. This vulnerability affects unknown code of the file /add-product.php. The manipulation of the argument productname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id
ed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311032 - https://vuldb.com/?ctiid.311032 - https://vuldb.com/?submit.588785 - https://github.com/FLYFISH567/CVE/issues/10 - https://phpgurukul.com/
CVE ID: CVE-2025-5576 State: PUBLISHED Published: 2025-06-04T07:31:06.643Z Last Updated: 2025-06-04T13:31:46.102Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Dairy Farm Shop Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Dairy Farm Shop Management System 1.3. This issue affects some unknown processing of the file /bwdate-report-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: R
tely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311033 - https://vuldb.com/?ctiid.311033 - https://vuldb.com/?submit.588789 - https://github.com/FLYFISH567/CVE/issues/11 - https://phpgurukul.com/
CVE ID: CVE-2025-5577 State: PUBLISHED Published: 2025-06-04T07:31:10.056Z Last Updated: 2025-06-04T13:30:31.463Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Dairy Farm Shop Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System 1.3. Affected is an unknown function of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311034 - https://vuldb.com/?ctiid.311034 - https://vuldb.com/?submit.588799 - https://github.com/FLYFISH567/CVE/issues/12 - https://phpgurukul.com/
CVE ID: CVE-2025-5578 State: PUBLISHED Published: 2025-06-04T08:00:19.179Z Last Updated: 2025-06-04T13:29:49.847Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Dairy Farm Shop Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sales-report-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichm
d remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311035 - https://vuldb.com/?ctiid.311035 - https://vuldb.com/?submit.588800 - https://github.com/FLYFISH567/CVE/issues/13 - https://phpgurukul.com/
CVE ID: CVE-2025-5579 State: PUBLISHED Published: 2025-06-04T08:00:34.491Z Last Updated: 2025-06-04T13:29:14.601Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Dairy Farm Shop Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this issue is some unknown functionality of the file /search-product.php. The manipulation of the argument productname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
it has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311036 - https://vuldb.com/?ctiid.311036 - https://vuldb.com/?submit.588804 - https://github.com/FLYFISH567/CVE/issues/14 - https://phpgurukul.com/
CVE ID: CVE-2025-5580 State: PUBLISHED Published: 2025-06-04T08:31:05.192Z Last Updated: 2025-06-04T13:26:23.460Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: CodeAstro Products: Real Estate Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311037 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311037 - https://vuldb.com/?ctiid.311037 - https://vuldb.com/?submit.588811 - https://github.com/YZS17/CVE/blob/main/CodeAstro_Real_Estate_Management_System/sqli_login.php.md - https://codeastro.com/
CVE ID: CVE-2025-5581 State: PUBLISHED Published: 2025-06-04T09:00:15.355Z Last Updated: 2025-06-04T13:25:49.608Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: CodeAstro Products: Real Estate Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument User leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.31103