Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-13270 State: PUBLISHED Published: 2025-11-17T08:02:06.920Z Last Updated: 2025-11-17T16:12:04.008Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: School Fees Payment Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes School Fees Payment Management System 1.0. This affects an unknown function of the file /ajax.php?action=save_course. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332605 - h
lic and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332605 - https://vuldb.com/?ctiid.332605 - https://vuldb.com/?submit.690039 - https://github.com/ASantsSec/CVE/issues/16 - https://www.campcodes.com/
CVE ID: CVE-2025-13271 State: PUBLISHED Published: 2025-11-17T08:32:06.938Z Last Updated: 2025-11-17T16:06:58.395Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: School Fees Payment Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
een publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332606 - https://vuldb.com/?ctiid.332606 - https://vuldb.com/?submit.690044 - https://github.com/ASantsSec/CVE/issues/18 - https://www.campcodes.com/
CVE ID: CVE-2025-13272 State: PUBLISHED Published: 2025-11-17T09:02:06.187Z Last Updated: 2025-11-17T15:56:54.259Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: School Fees Payment Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Affected is an unknown function of the file /manage_course.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332607 - https:/
d might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332607 - https://vuldb.com/?ctiid.332607 - https://vuldb.com/?submit.690046 - https://github.com/ASantsSec/CVE/issues/19 - https://www.campcodes.com/
CVE ID: CVE-2025-13273 State: PUBLISHED Published: 2025-11-17T09:32:07.141Z Last Updated: 2025-11-17T15:49:08.547Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: School Fees Payment Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_payment. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited. Additional Analyst Note
le to be carried out remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332608 - https://vuldb.com/?ctiid.332608 - https://vuldb.com/?submit.690048 - https://github.com/ASantsSec/CVE/issues/20 - https://www.campcodes.com/
CVE ID: CVE-2025-13274 State: PUBLISHED Published: 2025-11-17T10:02:06.285Z Last Updated: 2025-11-17T15:37:33.630Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: School Fees Payment Management System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in Campcodes School Fees Payment Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=delete_fees. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vu
emote. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332609 - https://vuldb.com/?ctiid.332609 - https://vuldb.com/?submit.690886 - https://github.com/ASantsSec/CVE/issues/21 - https://www.campcodes.com/
CVE ID: CVE-2025-13275 State: PUBLISHED Published: 2025-11-17T10:32:05.483Z Last Updated: 2025-11-17T15:03:10.579Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Iqbolshoh Products: php-business-website Problem Types: CWE-434, CWE-284 Description: A security vulnerability has been detected in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24. This affects an unknown part of the file /admin/about.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. This product is using a rolling release to provide continious delivery. Therefore, n
disclosed publicly and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332610 - https://vuldb.com/?ctiid.332610 - https://vuldb.com/?submit.690049 - https://github.com/mhszed/Report/blob/main/php-business-website%20upload.docx
CVE ID: CVE-2025-13276 State: PUBLISHED Published: 2025-11-17T11:02:06.477Z Last Updated: 2025-11-17T14:51:03.493Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: g33kyrash Products: Online-Banking-System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in g33kyrash Online-Banking-System up to 12dbfa690e5af649fb72d2e5d3674e88d6743455. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used. This product takes the approach of rolling releases to provide continious delivery. Ther
is now public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332611 - https://vuldb.com/?ctiid.332611 - https://vuldb.com/?submit.690087 - https://github.com/Nianalb/Report_Online-Banking-System/blob/main/SQL.docx
CVE ID: CVE-2025-13277 State: PUBLISHED Published: 2025-11-17T11:32:06.496Z Last Updated: 2025-11-17T14:27:08.612Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Nero Social Networking Site Problem Types: CWE-89, CWE-74 Description: A flaw has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of the file /friendsphoto.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332612 - https://vuldb.com/?ctiid
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332612 - https://vuldb.com/?ctiid.332612 - https://vuldb.com/?submit.690140 - https://github.com/daojian1/Nero-Social-Networking-Site-V1.0_004 - https://code-projects.org/
CVE ID: CVE-2025-13278 State: PUBLISHED Published: 2025-11-17T12:02:05.358Z Last Updated: 2025-11-17T14:01:52.696Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: projectworlds Products: Advanced Library Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrowed_book_search.php. Such manipulation of the argument datefrom/dateto leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
s been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332613 - https://vuldb.com/?ctiid.332613 - https://vuldb.com/?submit.690797 - https://github.com/CH0ico/CVE_choco_1/blob/master/report.md
CVE ID: CVE-2025-13279 State: PUBLISHED Published: 2025-11-17T12:32:06.789Z Last Updated: 2025-11-17T13:56:13.356Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Nero Social Networking Site Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Nero Social Networking Site 1.0. The affected element is an unknown function of the file /profilefriends.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332614 - htt
c and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332614 - https://vuldb.com/?ctiid.332614 - https://vuldb.com/?submit.690963 - https://github.com/daojian1/Nero-Social-Networking-Site-V1.0_005 - https://github.com/daojian1/Nero-Social-Networking-Site-V1.0_005/blob/main/report.md - https://code-projects.org/
CVE ID: CVE-2025-13280 State: PUBLISHED Published: 2025-11-17T13:02:06.244Z Last Updated: 2025-11-17T13:48:11.192Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: CodeAstro Products: Simple Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
blicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332615 - https://vuldb.com/?ctiid.332615 - https://vuldb.com/?submit.691380 - https://github.com/umu123456/cvesimpleInventorysystem/issues/1 - https://codeastro.com/
CVE ID: CVE-2025-13282 State: PUBLISHED Published: 2025-11-17T03:24:15.862Z Last Updated: 2025-11-17T16:40:28.659Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H) Vendors: Chunghwa Telecom Products: TenderDocTransfer Problem Types: CWE-352, CWE-36 Description: TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use these APIs through phishing. Additionally, one of the APIs contains an Absolute Path Traversal vulnerability, allowing atta
se APIs through phishing. Additionally, one of the APIs contains an Absolute Path Traversal vulnerability, allowing attackers to delete arbitrary files on the user's system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-10510-3719c-1.html - https://www.twcert.org.tw/en/cp-139-10511-10f3a-2.html
CVE ID: CVE-2025-13283 State: PUBLISHED Published: 2025-11-17T03:30:43.828Z Last Updated: 2025-11-17T16:38:33.963Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L) Vendors: Chunghwa Telecom Products: TenderDocTransfer Problem Types: CWE-352, CWE-36 Description: TenderDocTransfer developed by Chunghwa Telecom has a Arbitrary File Copy and Paste vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use these APIs through phishing. Additionally, one of the APIs contains an Absolute Path Traversal vulnerability. Attac
use these APIs through phishing. Additionally, one of the APIs contains an Absolute Path Traversal vulnerability. Attackers can copy arbitrary files on the user's system and paste them into any path, which poses a potential risk of information leakage or could consume hard drive space by copying files in large volumes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-10510-3719c-1.html - https://www.twcert.org.tw/en/cp-139-10511-10f3a-2.html
CVE ID: CVE-2025-13284 State: PUBLISHED Published: 2025-11-17T03:37:15.767Z Last Updated: 2025-11-17T17:57:06.866Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ThinPLUS Products: ThinPLUS Problem Types: CWE-78 Description: ThinPLUS developed by ThinPLUS has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-10512-e196b-1.html - https://www.twcert.org.tw/en/cp-139-10513-0d82b-2.html
CVE ID: CVE-2025-13285 State: PUBLISHED Published: 2025-11-17T13:32:06.771Z Last Updated: 2025-11-17T13:52:10.965Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Online Voting System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in itsourcecode Online Voting System 1.0. The affected element is an unknown function of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332625 - https://vuldb.com/?ctiid.
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332625 - https://vuldb.com/?ctiid.332625 - https://vuldb.com/?submit.690884 - https://vuldb.com/?submit.690887 - https://github.com/WANGshuyan2025/cve/issues/6 - https://itsourcecode.com/
CVE ID: CVE-2025-13286 State: PUBLISHED Published: 2025-11-17T14:02:06.736Z Last Updated: 2025-11-17T16:51:27.163Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Online Voting System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in itsourcecode Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=save_user. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332626 - https://vuldb.com/?ctiid.332626 - https://vuldb.com/?submit.690888 - https://github.com/WANGshuyan2025/cve/issues/8 - https://itsourcecode.com/
CVE ID: CVE-2025-13287 State: PUBLISHED Published: 2025-11-17T14:32:08.254Z Last Updated: 2025-11-17T14:42:36.230Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Online Voting System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in itsourcecode Online Voting System 1.0. This affects an unknown function of the file /index.php?page=categories. Executing manipulation of the argument id/category can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332627 - https://vuldb.com/?ctiid.332627 - https://vuldb.com/?submit.690889 - https://vuldb.com/?submit.690891 - https://github.com/WANGshuyan2025/cve/issues/9 - https://itsourcecode.com/
CVE ID: CVE-2025-13288 State: PUBLISHED Published: 2025-11-17T15:32:07.862Z Last Updated: 2025-11-17T15:43:45.974Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: CH22 Problem Types: CWE-120, CWE-119 Description: A security vulnerability has been detected in Tenda CH22 1.0.0.1. This impacts the function fromPptpUserSetting of the file /goform/PPTPUserSetting. The manipulation of the argument delno leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332628 - https://vuldb.com/?ctiid
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332628 - https://vuldb.com/?ctiid.332628 - https://vuldb.com/?submit.691594 - https://github.com/yyyy1g/CVE/issues/1 - https://www.tenda.com.cn/
CVE ID: CVE-2025-13289 State: PUBLISHED Published: 2025-11-17T16:02:05.303Z Last Updated: 2025-11-17T16:07:02.582Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: 1000projects Products: Design & Development of Student Database Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in 1000projects Design & Development of Student Database Management System 1.0. Affected is an unknown function of the file /TeacherLogin/Academics/SubjectDetails.php. The manipulation of the argument SubCode results in sql injection. The attack may be performed from remote. The exploit is now public and may be used. Additional Analyst Notes: - CISA
n. The attack may be performed from remote. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332629 - https://vuldb.com/?ctiid.332629 - https://vuldb.com/?submit.691612 - https://github.com/f14g-orz/CVE/issues/2
CVE ID: CVE-2025-13290 State: PUBLISHED Published: 2025-11-17T16:32:06.142Z Last Updated: 2025-11-17T16:59:08.119Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Food Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /saveorder.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332631 - https://vuldb.com/?ctiid.332631 - https://vuldb.com/?submit.691619 - https://github.com/liaoliao-hla/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-13291 State: PUBLISHED Published: 2025-11-17T17:02:07.150Z Last Updated: 2025-11-17T20:58:15.294Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Supplier Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Supplier Management System 1.0. This affects an unknown part of the file /manufacturer/confirm_order.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332632 - https://vuldb.co
e used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332632 - https://vuldb.com/?ctiid.332632 - https://vuldb.com/?submit.691620 - https://github.com/Fex212/CVE/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-13297 State: PUBLISHED Published: 2025-11-17T18:02:06.710Z Last Updated: 2025-11-17T21:21:04.312Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Web-Based Internet Laboratory Management System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. The impacted element is an unknown function of the file /course/controller.php. Such manipulation leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
he exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332637 - https://vuldb.com/?ctiid.332637 - https://vuldb.com/?submit.691786 - https://github.com/f14g-orz/CVE/issues/3 - https://itsourcecode.com/
CVE ID: CVE-2025-13298 State: PUBLISHED Published: 2025-11-17T19:32:06.284Z Last Updated: 2025-11-17T19:45:18.247Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Web-Based Internet Laboratory Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. This affects an unknown function of the file /enrollment/controller.php. Performing manipulation results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332638 - https://vuldb.com/?ctiid.332638 - https://vuldb.com/?submit.691787 - https://github.com/f14g-orz/CVE/issues/4 - https://itsourcecode.com/
CVE ID: CVE-2025-13299 State: PUBLISHED Published: 2025-11-17T20:02:06.587Z Last Updated: 2025-11-17T20:07:39.965Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Web-Based Internet Laboratory Management System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. This impacts an unknown function of the file /user/controller.php. Executing manipulation can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332639 -
blished and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332639 - https://vuldb.com/?ctiid.332639 - https://vuldb.com/?submit.691789 - https://github.com/f14g-orz/CVE/issues/5 - https://itsourcecode.com/