Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-2636 State: PUBLISHED Published: 2025-04-11T04:21:30.792Z Last Updated: 2025-04-11T16:01:36.011Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: instawp Products: InstaWP Connect – 1-click WP Staging & Migration Problem Types: CWE-22 Description: The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 0.1.0.85 via the 'instawp-database-manager' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access
arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4c8f2c6f-c231-477c-895b-df892569ef95?source=cve - https://plugins.trac.wordpress.org/browser/instawp-connect/trunk/includes/database-manager/loader.php#L77 - https://plugins.trac.wordpress.org/changeset/3269681/
CVE ID: CVE-2025-2637 State: PUBLISHED Published: 2025-03-23T00:00:09.407Z Last Updated: 2025-03-24T13:59:38.144Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: n/a Products: JIZHICMS Problem Types: CWE-285, CWE-266 Description: A vulnerability, which was classified as problematic, has been found in JIZHICMS up to 1.7.0. Affected by this issue is some unknown functionality of the file /user/userinfo.html of the component Account Profile Page. The manipulation of the argument jifen leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichme
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300638 - https://vuldb.com/?ctiid.300638 - https://vuldb.com/?submit.519632 - https://github.com/H3rmesk1t/vulnerability-paper/blob/main/jizhiCMS-1.7.0-Incorrect%20Access%20Control.md
CVE ID: CVE-2025-2638 State: PUBLISHED Published: 2025-03-23T01:31:04.473Z Last Updated: 2025-03-24T13:59:00.504Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: n/a Products: JIZHICMS Problem Types: CWE-285, CWE-266 Description: A vulnerability, which was classified as problematic, was found in JIZHICMS up to 1.7.0. This affects an unknown part of the file /user/release.html of the component Article Handler. The manipulation of the argument ishot with the input 1 leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
ly. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300639 - https://vuldb.com/?ctiid.300639 - https://vuldb.com/?submit.519633 - https://github.com/H3rmesk1t/vulnerability-paper/blob/main/jizhiCMS-1.7.0-Incorrect%20Access%20Control2.md
CVE ID: CVE-2025-2639 State: PUBLISHED Published: 2025-03-23T02:31:04.017Z Last Updated: 2025-03-24T14:25:12.626Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: n/a Products: JIZHICMS Problem Types: CWE-285, CWE-266 Description: A vulnerability has been found in JIZHICMS up to 1.7.0 and classified as problematic. This vulnerability affects unknown code of the file /user/release.html of the component Article Handler. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300640 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300640 - https://vuldb.com/?ctiid.300640 - https://vuldb.com/?submit.519634 - https://github.com/H3rmesk1t/vulnerability-paper/blob/main/jizhiCMS-1.7.0-Incorrect%20Access%20Control3.md
CVE ID: CVE-2025-2640 State: PUBLISHED Published: 2025-03-23T03:31:05.470Z Last Updated: 2025-03-24T14:20:02.534Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Doctor Appointment Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Doctor Appointment Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /doctor/appointment-bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP V
initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300641 - https://vuldb.com/?ctiid.300641 - https://vuldb.com/?submit.519644 - https://github.com/AiENG07/CVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-2641 State: PUBLISHED Published: 2025-03-23T04:31:05.696Z Last Updated: 2025-03-24T12:51:22.650Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Art Gallery Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Art Gallery Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit-artist-detail.php?editid=1. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
motely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300656 - https://vuldb.com/?ctiid.300656 - https://vuldb.com/?submit.519768 - https://github.com/liuhao2638/cve/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-2642 State: PUBLISHED Published: 2025-03-23T07:00:09.649Z Last Updated: 2025-03-24T12:50:39.480Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Art Gallery Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Art Gallery Management System 1.0. This affects an unknown part of the file /admin/edit-art-product-detail.php?editid=2. The manipulation of the argument editide/sprice/description leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vuln
attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300657 - https://vuldb.com/?ctiid.300657 - https://vuldb.com/?submit.519769 - https://github.com/liuhao2638/cve/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-2643 State: PUBLISHED Published: 2025-03-23T07:31:05.466Z Last Updated: 2025-03-24T12:48:48.656Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Art Gallery Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Art Gallery Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit-art-type-detail.php?editid=1. The manipulation of the argument arttype leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
loit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300658 - https://vuldb.com/?ctiid.300658 - https://vuldb.com/?submit.519772 - https://github.com/liuhao2638/cve/issues/6 - https://phpgurukul.com/
CVE ID: CVE-2025-2644 State: PUBLISHED Published: 2025-03-23T08:00:12.080Z Last Updated: 2025-03-24T12:48:07.047Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Art Gallery Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Art Gallery Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/add-art-product.php. The manipulation of the argument arttype leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
sclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300659 - https://vuldb.com/?ctiid.300659 - https://vuldb.com/?submit.519773 - https://github.com/liuhao2638/cve/issues/7 - https://phpgurukul.com/
CVE ID: CVE-2025-2645 State: PUBLISHED Published: 2025-03-23T08:31:05.429Z Last Updated: 2025-03-24T12:47:18.110Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Art Gallery Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /product.php. The manipulation of the argument artname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
sclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300660 - https://vuldb.com/?ctiid.300660 - https://vuldb.com/?submit.519775 - https://github.com/liuhao2638/cve/issues/8 - https://phpgurukul.com/
CVE ID: CVE-2025-2646 State: PUBLISHED Published: 2025-03-23T09:31:05.056Z Last Updated: 2025-03-24T12:46:39.317Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Art Gallery Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional
y. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300661 - https://vuldb.com/?ctiid.300661 - https://vuldb.com/?submit.519776 - https://github.com/liuhao2638/cve/issues/9 - https://phpgurukul.com/
CVE ID: CVE-2025-2647 State: PUBLISHED Published: 2025-03-23T11:00:08.000Z Last Updated: 2025-03-24T12:45:58.996Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Art Gallery Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search.php. The manipulation of the argument Search leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
osed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300662 - https://vuldb.com/?ctiid.300662 - https://vuldb.com/?submit.519777 - https://github.com/liuhao2638/cve/issues/10 - https://phpgurukul.com/
CVE ID: CVE-2025-2648 State: PUBLISHED Published: 2025-03-23T11:31:05.188Z Last Updated: 2025-03-24T12:45:22.267Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Art Gallery Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Art Gallery Management System 1.0. This affects an unknown part of the file /admin/view-enquiry-detail.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
sclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300663 - https://vuldb.com/?ctiid.300663 - https://vuldb.com/?submit.519779 - https://github.com/liuhao2638/cve/issues/11 - https://phpgurukul.com/
CVE ID: CVE-2025-2649 State: PUBLISHED Published: 2025-03-23T12:00:09.631Z Last Updated: 2025-03-24T14:19:24.412Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Doctor Appointment Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Doctor Appointment Management System 1.0. This vulnerability affects unknown code of the file /check-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
een disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300664 - https://vuldb.com/?ctiid.300664 - https://vuldb.com/?submit.519780 - https://github.com/liuhao2638/cve/issues/12 - https://phpgurukul.com/
CVE ID: CVE-2025-2650 State: PUBLISHED Published: 2025-03-23T14:00:08.682Z Last Updated: 2025-03-24T13:35:23.010Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: PHPGurukul Products: Medical Card Generation System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in PHPGurukul Medical Card Generation System 1.0. This issue affects some unknown processing of the file /download-medical-cards.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
ly. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300665 - https://vuldb.com/?ctiid.300665 - https://vuldb.com/?submit.519781 - https://github.com/liuhao2638/cve/issues/13 - https://phpgurukul.com/
CVE ID: CVE-2025-2651 State: PUBLISHED Published: 2025-03-23T14:31:04.927Z Last Updated: 2025-03-24T15:16:17.659Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SourceCodester Products: Online Eyewear Shop Problem Types: CWE-548, CWE-552 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /oews/admin/. The manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. Multiple
ploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. Multiple sub-directories are affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300666 - https://vuldb.com/?ctiid.300666 - https://vuldb.com/?submit.519873 - https://github.com/happytraveller-alone/cve/blob/main/Directory%20Traversal%20Vulnerability.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-2652 State: PUBLISHED Published: 2025-03-23T15:00:07.784Z Last Updated: 2025-03-24T12:23:48.358Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: SourceCodester Products: Employee and Visitor Gate Pass Logging System Problem Types: CWE-548, CWE-552 Description: A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to exposure of information through directory listing. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to c
he attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. Multiple sub-directories are affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300667 - https://vuldb.com/?ctiid.300667 - https://vuldb.com/?submit.519876 - https://github.com/happytraveller-alone/cve/blob/main/dir.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-2653 State: PUBLISHED Published: 2025-03-23T15:31:10.397Z Last Updated: 2025-03-24T12:18:51.439Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: n/a Products: FoxCMS Problem Types: CWE-285, CWE-266 Description: A vulnerability was found in FoxCMS 1.25 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300668 - https://vuldb.com/?ctiid.300668 - https://vuldb.com/?submit.519927
chment: References: - https://vuldb.com/?id.300668 - https://vuldb.com/?ctiid.300668 - https://vuldb.com/?submit.519927 - https://www.yuque.com/yuqueyonghuveuwuh/aveeid/nvg6rd3qw1ww83yo?singleDoc
CVE ID: CVE-2025-2654 State: PUBLISHED Published: 2025-03-23T16:00:05.921Z Last Updated: 2025-03-24T12:14:41.039Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: AC Repair and Services System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/services/manage_service.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
loit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300669 - https://vuldb.com/?ctiid.300669 - https://vuldb.com/?submit.520013 - https://github.com/Colorado-all/cve/blob/main/AC%20Repair%20and%20Services%20System%20using/SQL-4.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-2655 State: PUBLISHED Published: 2025-03-23T16:31:05.023Z Last Updated: 2025-11-22T16:50:25.390Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: AC Repair and Services System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in SourceCodester AC Repair and Services System 1.0. The affected element is the function save_users/delete_users of the file /classes/Users.php. Performing manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CI
y. The exploit is now public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300670 - https://vuldb.com/?ctiid.300670 - https://vuldb.com/?submit.520017 - https://vuldb.com/?submit.696635 - https://github.com/Colorado-all/cve/blob/main/AC%20Repair%20and%20Services%20System%20using/SQL-8.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-2656 State: PUBLISHED Published: 2025-03-23T17:00:09.447Z Last Updated: 2025-03-24T14:10:50.313Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Zoo Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300672 - https://vuld
ay be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300672 - https://vuldb.com/?ctiid.300672 - https://vuldb.com/?submit.520234 - https://github.com/ydnd/cve/issues/4 - https://phpgurukul.com/
CVE ID: CVE-2025-2657 State: PUBLISHED Published: 2025-03-23T17:31:04.272Z Last Updated: 2025-03-24T14:01:49.959Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: projectworlds Products: Apartment Visitors Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in projectworlds Apartment Visitors Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /front.php. The manipulation of the argument rid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300673 - https://vuldb.com/?ctiid.300673 - https://vuldb.com/?submit.520237 - https://github.com/ydnd/cve/issues/5
CVE ID: CVE-2025-2658 State: PUBLISHED Published: 2025-03-23T18:00:09.299Z Last Updated: 2025-03-24T13:54:42.742Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online Security Guards Hiring System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Online Security Guards Hiring System 1.0. Affected by this issue is some unknown functionality of the file /search-request.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment
emotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300674 - https://vuldb.com/?ctiid.300674 - https://vuldb.com/?submit.520250 - https://github.com/zyb26252/CVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-2659 State: PUBLISHED Published: 2025-03-23T18:31:03.927Z Last Updated: 2025-03-24T13:47:58.107Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Project Worlds Products: Online Time Table Generator Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /student/index.php. The manipulation of the argument e leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.