Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-11573 State: PUBLISHED Published: 2025-10-09T17:48:13.305Z Last Updated: 2025-10-09T19:34:39.743Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Amazon Products: Amazon.IonDotnet Problem Types: CWE-1286 Description: An infinite loop issue in Amazon.IonDotnet library versions <v1.3.2 may allow a threat actor to cause a denial of service through a specially crafted text input. To mitigate this issue, users should upgrade to version v1.3.2. As of August 20, 2025, this library has been deprecated and will not receive further updates. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/amazon-ion/ion-dotnet/releases
ates. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/amazon-ion/ion-dotnet/releases/tag/v1.3.2 - https://aws.amazon.com/security/security-bulletins/AWS-2025-022/ - https://github.com/amazon-ion/ion-dotnet/security/advisories/GHSA-q5r6-9qwq-g2wj
CVE ID: CVE-2025-11575 State: PUBLISHED Published: 2025-10-23T00:22:00.809Z Last Updated: 2025-10-24T03:55:20.703Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: MongoDB Products: Atlas SQL ODBC driver Problem Types: CWE-276 Description: Incorrect Default Permissions vulnerability in MongoDB Atlas SQL ODBC driver on Windows allows Privilege Escalation.This issue affects MongoDB Atlas SQL ODBC driver: from 1.0.0 through 2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.mongodb.com/docs/atlas/release-notes/sql/
CVE ID: CVE-2025-11576 State: PUBLISHED Published: 2025-10-24T12:29:56.573Z Last Updated: 2025-10-24T12:48:31.982Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: newcodebyte Products: AI Chatbot Free Models – Customer Support, Live Chat, Virtual Assistant Problem Types: CWE-1236 Description: The AI Chatbot Free Models – Customer Support, Live Chat, Virtual Assistant plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 1.6.5. This is due to insufficient sanitization in the 'newcodebyte_chatbot_export_messages' function. This makes it possible for unauthenticated attackers to embed untrusted input into exported CSV files,
sages' function. This makes it possible for unauthenticated attackers to embed untrusted input into exported CSV files, which can result in code execution when these files are downloaded and opened on a local system with a vulnerable configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5064873b-e70a-4fe6-8c5c-ced6025aaa5f?source=cve - https://plugins.trac.wordpress.org/changeset/3378450/
CVE ID: CVE-2025-11577 State: PUBLISHED Published: 2025-10-14T15:34:09.651Z Last Updated: 2025-10-15T13:17:44.736Z Vendors: Clevo Products: Notebook System Firmware Problem Types: CWE-321 Use of Hard‑coded Cryptographic Key Description: Clevo’s UEFI firmware update packages, including B10717.exe, inadvertently contained private signing keys used for Boot Guard and Boot Policy Manifest verification. The exposure of these keys could allow attackers to sign malicious firmware that appears trusted by affected systems, undermining the integrity of the early boot process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.binarly.io/advisories/brly-2025-002 - https://www.
nal Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.binarly.io/advisories/brly-2025-002 - https://www.kb.cert.org/vuls/id/538470
CVE ID: CVE-2025-11578 State: PUBLISHED Published: 2025-11-10T22:44:33.200Z Last Updated: 2025-11-12T20:12:10.957Z Vendors: GitHub Products: Enterprise Server Problem Types: CWE-59 Description: A privilege escalation vulnerability was identified in GitHub Enterprise Server that allowed an authenticated Enterprise admin to gain root SSH access to the appliance by exploiting a symlink escape in pre-receive hook environments. By crafting a malicious repository and environment, an attacker could replace system binaries during hook cleanup and execute a payload that adds their own SSH key to the root user’s authorized keys—thereby granting themselves root SSH access to the server. To exploit this
wn SSH key to the root user’s authorized keys—thereby granting themselves root SSH access to the server. To exploit this vulnerability, the attacker needed to have enterprise admin privileges. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.19, and was fixed in versions 3.14.19, 3.15.14, 3.16.10, 3.17.7 and 3.18.1. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.github.com/en/enterprise-server@3.14/admin/release-notes#3.14.19 - https://docs.github.com/en/enterprise-server@3.15/admin/release-notes#3.15.14 - https://docs.github.com/en/enterprise-server@3.16/admin/rel
.com/en/enterprise-server@3.15/admin/release-notes#3.15.14 - https://docs.github.com/en/enterprise-server@3.16/admin/release-notes#3.16.10 - https://docs.github.com/en/enterprise-server@3.17/admin/release-notes#3.17.7 - https://docs.github.com/en/enterprise-server@3.18/admin/release-notes#3.18.1
CVE ID: CVE-2025-11579 State: PUBLISHED Published: 2025-10-10T11:15:15.163Z Last Updated: 2025-10-10T12:41:22.168Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: nwaples Products: rardecode Problem Types: CWE-789 Description: github.com/nwaples/rardecode versions <=2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nwaples/rardecode/commit/52fb4e825c936636f251f7e7deded39ab11df9a9
CVE ID: CVE-2025-11580 State: PUBLISHED Published: 2025-10-10T18:02:05.673Z Last Updated: 2025-10-10T20:29:00.888Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: n/a Products: PowerJob Problem Types: CWE-862, CWE-863 Description: A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes missing authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327902 - https://vuldb.com/?ctiid.327902 - https://vuldb.com/?s
SA ADP Vulnrichment: References: - https://vuldb.com/?id.327902 - https://vuldb.com/?ctiid.327902 - https://vuldb.com/?submit.662446 - https://github.com/PowerJob/PowerJob/issues/1127
CVE ID: CVE-2025-11581 State: PUBLISHED Published: 2025-10-10T19:02:05.565Z Last Updated: 2025-10-10T19:15:45.273Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: n/a Products: PowerJob Problem Types: CWE-862, CWE-863 Description: A security vulnerability has been detected in PowerJob up to 5.1.2. This vulnerability affects unknown code of the file /openApi/runJob of the component OpenAPIController. Such manipulation leads to missing authorization. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327903 - https://v
d may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327903 - https://vuldb.com/?ctiid.327903 - https://vuldb.com/?submit.662558 - https://github.com/PowerJob/PowerJob/issues/1128
CVE ID: CVE-2025-11582 State: PUBLISHED Published: 2025-10-10T20:02:05.789Z Last Updated: 2025-10-10T20:25:26.636Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Job Search Engine Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in code-projects Online Job Search Engine 1.0. This issue affects some unknown processing of the file /registration.php. Performing manipulation of the argument txtusername results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327904 - https://v
d may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327904 - https://vuldb.com/?ctiid.327904 - https://vuldb.com/?submit.671468 - https://github.com/iMayday-Yee/Vulnerability/issues/4 - https://code-projects.org/
CVE ID: CVE-2025-11583 State: PUBLISHED Published: 2025-10-10T20:02:08.317Z Last Updated: 2025-10-10T20:24:10.840Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Job Search Engine Problem Types: CWE-89, CWE-74 Description: A flaw has been found in code-projects Online Job Search Engine 1.0. Impacted is an unknown function of the file /postjob.php. Executing manipulation of the argument txtjobID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327905 - https://vuldb.com/?ctiid.327905
nal Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327905 - https://vuldb.com/?ctiid.327905 - https://vuldb.com/?submit.671469 - https://github.com/iMayday-Yee/Vulnerability/issues/5 - https://code-projects.org/
CVE ID: CVE-2025-11584 State: PUBLISHED Published: 2025-10-10T20:32:05.844Z Last Updated: 2025-10-14T14:51:48.876Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Job Search Engine Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Online Job Search Engine 1.0. The affected element is an unknown function of the file /searchjob.php. The manipulation of the argument txtspecialization leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327906 - https://vuldb.com/?ctiid.327906 - https://vuldb.com/?submit.671558 - https://github.com/xupeng02/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-11585 State: PUBLISHED Published: 2025-10-10T21:02:06.965Z Last Updated: 2025-10-14T14:52:21.731Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Project Monitoring System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /useredit.php. The manipulation of the argument uid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327907 - https://vuldb.com/?c
ed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327907 - https://vuldb.com/?ctiid.327907 - https://vuldb.com/?submit.671506 - https://github.com/tiancesec/CVE/issues/8 - https://code-projects.org/
CVE ID: CVE-2025-11586 State: PUBLISHED Published: 2025-10-10T21:02:10.890Z Last Updated: 2025-10-14T14:53:00.342Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC7 Problem Types: CWE-121, CWE-119 Description: A vulnerability was determined in Tenda AC7 15.03.06.44. This affects an unknown function of the file /goform/setNotUpgrade. This manipulation of the argument newVersion causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327908 - https://vuldb.com/?ctiid.3279
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327908 - https://vuldb.com/?ctiid.327908 - https://vuldb.com/?submit.671597 - https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/AC7/setNotUpgrade.md - https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/AC7/setNotUpgrade.md#exploit - https://www.tenda.com.cn/
CVE ID: CVE-2025-11587 State: PUBLISHED Published: 2025-10-29T12:31:51.684Z Last Updated: 2025-10-29T13:21:28.252Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: jgrietveld Products: Call Now Button – The #1 Click to Call Button for WordPress Problem Types: CWE-862 Description: The Call Now Button – The #1 Click to Call Button for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the activate function in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to link the plugin to their nowbuttons.com account and
authenticated attackers, with Subscriber-level access and above, to link the plugin to their nowbuttons.com account and add malicious buttons to the site. The vulnerability is only exploitable on fresh installs where the plugin has not been previously configured with an API key. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d77b127e-52ee-4256-9450-410413b273f6?source=cve - https://plugins.trac.wordpress.org/browser/call-now-button/tags/1.5.3/src/admin/api-key/class-ott-controller.php#L27
CVE ID: CVE-2025-11588 State: PUBLISHED Published: 2025-10-10T21:32:06.853Z Last Updated: 2025-10-14T14:56:12.673Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: CodeAstro Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Such manipulation of the argument fullname leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327909 - https://vuldb.com/?ctiid.32
itional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327909 - https://vuldb.com/?ctiid.327909 - https://vuldb.com/?submit.671735 - https://github.com/coppeliaz/cve/issues/1 - https://codeastro.com/
CVE ID: CVE-2025-11589 State: PUBLISHED Published: 2025-10-10T21:32:09.530Z Last Updated: 2025-10-14T14:56:47.961Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: CodeAstro Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/user-payment.php. Performing manipulation of the argument plan results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3279
public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327910 - https://vuldb.com/?ctiid.327910 - https://vuldb.com/?submit.671736 - https://github.com/coppeliaz/cve/issues/2 - https://codeastro.com/
CVE ID: CVE-2025-11590 State: PUBLISHED Published: 2025-10-11T01:02:07.340Z Last Updated: 2025-10-14T14:15:32.685Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: CodeAstro Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/equipment-entry.php. Executing manipulation of the argument ename can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
as been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327911 - https://vuldb.com/?ctiid.327911 - https://vuldb.com/?submit.671738 - https://github.com/coppeliaz/cve/issues/3 - https://codeastro.com/
CVE ID: CVE-2025-11591 State: PUBLISHED Published: 2025-10-11T05:02:06.905Z Last Updated: 2025-10-14T14:13:30.750Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: CodeAstro Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/actions/delete-member.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327912 - https://vuldb.com/?ctiid.327912 - https://vuldb.com/?submit.671739 - https://github.com/coppeliaz/cve/issues/4 - https://codeastro.com/
CVE ID: CVE-2025-11592 State: PUBLISHED Published: 2025-10-11T06:32:06.416Z Last Updated: 2025-10-14T14:13:19.523Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: CodeAstro Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/edit-equipmentform.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327913 - https://vuldb.com/?ctiid.327913 - https://
Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327913 - https://vuldb.com/?ctiid.327913 - https://vuldb.com/?submit.671740 - https://github.com/coppeliaz/cve/issues/5 - https://codeastro.com/
CVE ID: CVE-2025-11593 State: PUBLISHED Published: 2025-10-11T07:02:05.897Z Last Updated: 2025-10-14T14:13:06.663Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: CodeAstro Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in CodeAstro Gym Management System 1.0. This vulnerability affects unknown code of the file /admin/actions/delete-equipment.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327914 - https://vuldb.com/?ctiid.3279
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327914 - https://vuldb.com/?ctiid.327914 - https://vuldb.com/?submit.671741 - https://github.com/coppeliaz/cve/issues/6 - https://codeastro.com/
CVE ID: CVE-2025-11594 State: PUBLISHED Published: 2025-10-11T09:02:05.497Z Last Updated: 2025-10-14T14:09:17.291Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R) Vendors: ywxbear Products: PHP-Bookstore-Website-Example, PHP Basic BookStore Website Problem Types: CWE-1284, CWE-703 Description: A vulnerability has been found in ywxbear PHP-Bookstore-Website-Example and PHP Basic BookStore Website up to 0e0b9f542f7a2d90a8d7f8c83caca69294e234e4. This issue affects some unknown processing of the file /index.php of the component Quantity Handler. Such manipulation leads to improper validation of specified quantity in input. The attack may be launched remotel
ndler. Such manipulation leads to improper validation of specified quantity in input. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327915 - https://vuldb.com/?ctiid.327915 - https://vuldb.com/?submit.671737 - https://github.com/Lianhaorui/Report/blob/main/Payment%20Logic%20Vulnerability.docx
CVE ID: CVE-2025-11595 State: PUBLISHED Published: 2025-10-11T09:32:06.781Z Last Updated: 2025-10-14T14:08:52.688Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Apartment Visitor Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Online Apartment Visitor Management System 1.0. Impacted is an unknown function of the file /admin-profile.php. Performing manipulation of the argument mobilenumber results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327916 - https://vuldb.com/?ctiid.327916 - https://vuldb.com/?submit.671760 - https://github.com/DavCloudz/cve/issues/6 - https://www.campcodes.com/
CVE ID: CVE-2025-11596 State: PUBLISHED Published: 2025-10-11T10:02:05.943Z Last Updated: 2025-10-14T14:08:43.560Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: E-Commerce Website Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in code-projects E-Commerce Website 1.0. The affected element is an unknown function of the file /pages/delete_order_details.php. Executing manipulation of the argument order_id can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id
ly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327917 - https://vuldb.com/?ctiid.327917 - https://vuldb.com/?submit.671764 - https://github.com/Blowingwinds/cve-report/blob/main/cve5/report.md - https://code-projects.org/
CVE ID: CVE-2025-11597 State: PUBLISHED Published: 2025-10-11T11:02:06.027Z Last Updated: 2025-10-14T14:06:55.686Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: E-Commerce Website Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in code-projects E-Commerce Website 1.0. The impacted element is an unknown function of the file /pages/product_add_qty.php. The manipulation of the argument prod_id leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327918 -
lable and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327918 - https://vuldb.com/?ctiid.327918 - https://vuldb.com/?submit.671765 - https://github.com/Blowingwinds/cve-report/blob/main/cve6/report.md - https://code-projects.org/