Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-4483 State: PUBLISHED Published: 2025-05-09T17:31:06.841Z Last Updated: 2025-05-09T19:22:48.877Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /view_pdetails.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
osed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308198 - https://vuldb.com/?ctiid.308198 - https://vuldb.com/?submit.566778 - https://github.com/wyl091256/CVE/issues/3 - https://itsourcecode.com/
CVE ID: CVE-2025-4484 State: PUBLISHED Published: 2025-05-09T19:00:05.899Z Last Updated: 2025-05-09T19:17:28.637Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in itsourcecode Gym Management System 1.0. This affects an unknown part of the file /ajax.php?action=delete_user. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.30819
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308199 - https://vuldb.com/?ctiid.308199 - https://vuldb.com/?submit.566779 - https://github.com/wyl091256/CVE/issues/4 - https://itsourcecode.com/
CVE ID: CVE-2025-4485 State: PUBLISHED Published: 2025-05-09T19:00:08.806Z Last Updated: 2025-05-09T19:13:39.645Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in itsourcecode Gym Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=delete_trainer. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3082
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308200 - https://vuldb.com/?ctiid.308200 - https://vuldb.com/?submit.566780 - https://github.com/wyl091256/CVE/issues/5 - https://itsourcecode.com/
CVE ID: CVE-2025-4486 State: PUBLISHED Published: 2025-05-09T19:31:05.515Z Last Updated: 2025-05-12T19:31:55.141Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in itsourcecode Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.php?action=delete_plan. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308201 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308201 - https://vuldb.com/?ctiid.308201 - https://vuldb.com/?submit.566781 - https://github.com/wyl091256/CVE/issues/6 - https://itsourcecode.com/
CVE ID: CVE-2025-4487 State: PUBLISHED Published: 2025-05-09T20:00:07.399Z Last Updated: 2025-05-12T19:31:26.135Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=delete_member. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308202 - https://vuldb.com/?ctiid.308202 - https://vuldb.com/?submit.566782 - https://github.com/wyl091256/CVE/issues/7 - https://itsourcecode.com/
CVE ID: CVE-2025-4488 State: PUBLISHED Published: 2025-05-09T20:00:09.660Z Last Updated: 2025-05-10T01:49:15.933Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_package. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
as been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308203 - https://vuldb.com/?ctiid.308203 - https://vuldb.com/?submit.566783 - https://github.com/wyl091256/CVE/issues/8 - https://itsourcecode.com/
CVE ID: CVE-2025-4489 State: PUBLISHED Published: 2025-05-09T20:31:05.491Z Last Updated: 2025-05-10T01:48:12.401Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Online Food Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/user-router.php. The manipulation of the argument t1_verified leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
s been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308204 - https://vuldb.com/?ctiid.308204 - https://vuldb.com/?submit.566784 - https://github.com/wyl091256/CVE/issues/9 - https://www.campcodes.com/
CVE ID: CVE-2025-4490 State: PUBLISHED Published: 2025-05-09T21:00:08.449Z Last Updated: 2025-05-10T01:43:04.778Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Online Food Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /view-ticket-admin.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308205 - htt
lic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308205 - https://vuldb.com/?ctiid.308205 - https://vuldb.com/?submit.566785 - https://github.com/wyl091256/CVE/issues/10 - https://www.campcodes.com/
CVE ID: CVE-2025-4491 State: PUBLISHED Published: 2025-05-09T21:00:10.575Z Last Updated: 2025-05-10T01:41:36.112Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Online Food Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/ticket-status.php. The manipulation of the argument ticket_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.30820
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308206 - https://vuldb.com/?ctiid.308206 - https://vuldb.com/?submit.566786 - https://github.com/wyl091256/CVE/issues/11 - https://www.campcodes.com/
CVE ID: CVE-2025-4492 State: PUBLISHED Published: 2025-05-09T21:31:04.462Z Last Updated: 2025-05-10T01:39:52.396Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Online Food Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in Campcodes Online Food Ordering System 1.0. This issue affects some unknown processing of the file /routers/ticket-message.php. The manipulation of the argument ticket_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
as been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308207 - https://vuldb.com/?ctiid.308207 - https://vuldb.com/?submit.566787 - https://github.com/wyl091256/CVE/issues/12 - https://www.campcodes.com/
CVE ID: CVE-2025-4493 State: PUBLISHED Published: 2025-05-28T12:35:36.654Z Last Updated: 2025-05-28T14:01:58.786Z Vendors: Devolutions Products: Server Problem Types: CWE-266 Description: Improper privilege assignment in PAM JIT privilege sets in Devolutions Server allows a PAM user to perform PAM JIT requests on unauthorized groups by exploiting a user interface issue. This issue affects the following versions : * Devolutions Server 2025.1.3.0 through 2025.1.7.0 * Devolutions Server 2024.3.15.0 and earlier Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2025-0008/
CVE ID: CVE-2025-4494 State: PUBLISHED Published: 2025-05-09T21:31:06.098Z Last Updated: 2025-05-10T01:37:47.295Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: JAdmin-JAVA Products: JAdmin Problem Types: CWE-287 Description: A vulnerability, which was classified as critical, was found in JAdmin-JAVA JAdmin 1.0. Affected is the function toLogin of the file NoNeedLoginController.java of the component Admin Backend. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308208 - https://vuldb
y be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308208 - https://vuldb.com/?ctiid.308208 - https://vuldb.com/?submit.566984 - https://github.com/JAdmin-JAVA/JAdmin/issues/1 - https://github.com/JAdmin-JAVA/JAdmin/issues/1#issue-3012501470
CVE ID: CVE-2025-4495 State: PUBLISHED Published: 2025-05-10T01:00:07.907Z Last Updated: 2025-05-10T01:34:58.798Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: JAdmin-JAVA Products: JAdmin Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in JAdmin-JAVA JAdmin 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /memoAjax/save. The manipulation of the argument ID leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308209 - https://vuldb.com/
used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308209 - https://vuldb.com/?ctiid.308209 - https://vuldb.com/?submit.566985 - https://github.com/JAdmin-JAVA/JAdmin/issues/2 - https://github.com/JAdmin-JAVA/JAdmin/issues/2#issue-3012512653
CVE ID: CVE-2025-4496 State: PUBLISHED Published: 2025-05-10T05:00:10.763Z Last Updated: 2025-05-12T19:30:55.738Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: TOTOLINK Products: T10, A3100R, A950RG, A800R, N600R, A3000RU, A810R Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This vulnerability affects the function CloudACMunualUpdate of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Ad
buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308212 - https://vuldb.com/?ctiid.308212 - https://vuldb.com/?submit.567081 - https://github.com/CH13hh/tmp_store_cc/blob/main/tt/ta/1.md - https://www.totolink.net/
CVE ID: CVE-2025-4497 State: PUBLISHED Published: 2025-05-10T07:00:08.183Z Last Updated: 2025-05-12T17:57:29.268Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Simple Banking System Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in code-projects Simple Banking System up to 1.0. It has been rated as critical. This issue affects some unknown processing of the component Sign In. The manipulation of the argument password2 leads to buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308213 - https://vuldb.com/?ctiid.308213 - https://vuldb.com/?submit.567082 - https://github.com/zzzxc643/cve/blob/main/Banking_System.md - https://code-projects.org/
CVE ID: CVE-2025-4498 State: PUBLISHED Published: 2025-05-10T10:00:06.360Z Last Updated: 2025-05-12T17:56:50.993Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Simple Bus Reservation System Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical has been found in code-projects Simple Bus Reservation System 1.0. Affected is the function a::install of the component Install Bus. The manipulation of the argument bus leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vuln
the local host. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308214 - https://vuldb.com/?ctiid.308214 - https://vuldb.com/?submit.567108 - https://github.com/zzzxc643/cve/blob/main/Bus%20Management%20System.md - https://code-projects.org/
CVE ID: CVE-2025-4499 State: PUBLISHED Published: 2025-05-10T11:31:04.286Z Last Updated: 2025-05-12T22:08:07.516Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Simple Hospital Management System Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical was found in code-projects Simple Hospital Management System 1.0. Affected by this vulnerability is the function Add of the component Add Information. The manipulation of the argument x[i].name/x[i].disease leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Additional A
w. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308215 - https://vuldb.com/?ctiid.308215 - https://vuldb.com/?submit.567109 - https://github.com/zzzxc643/cve/blob/main/Hospital%20Management%20System.md - https://code-projects.org/
CVE ID: CVE-2025-4500 State: PUBLISHED Published: 2025-05-10T12:31:04.234Z Last Updated: 2025-05-12T22:08:01.899Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Hotel Management System Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, has been found in code-projects Hotel Management System 1.0. Affected by this issue is the function Edit of the component Edit Room. The manipulation of the argument roomnumber leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnri
ached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308216 - https://vuldb.com/?ctiid.308216 - https://vuldb.com/?submit.567110 - https://github.com/zzzxc643/cve/blob/main/HOTEL_MANAGEMENT_SYSTEM.md - https://code-projects.org/
CVE ID: CVE-2025-4501 State: PUBLISHED Published: 2025-05-10T13:00:07.296Z Last Updated: 2025-05-12T22:07:57.020Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Album Management System Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, was found in code-projects Album Management System 1.0. This affects the function searchalbum of the component Search Albums. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
it has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308217 - https://vuldb.com/?ctiid.308217 - https://vuldb.com/?submit.567111 - https://github.com/zzzxc643/cve/blob/main/ALBUM_MANAGEMENT_SYSTEM.md - https://code-projects.org/
CVE ID: CVE-2025-4502 State: PUBLISHED Published: 2025-05-10T13:31:05.680Z Last Updated: 2025-05-12T17:46:33.903Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/creditor_add.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308218 - https://vuldb.com/
used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308218 - https://vuldb.com/?ctiid.308218 - https://vuldb.com/?submit.567144 - https://github.com/0x0a1lphg/CVE/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-4503 State: PUBLISHED Published: 2025-05-10T14:00:05.767Z Last Updated: 2025-05-12T14:27:48.198Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/customer_update.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308219
e public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308219 - https://vuldb.com/?ctiid.308219 - https://vuldb.com/?submit.567145 - https://github.com/0x0a1lphg/CVE/issues/2 - https://www.campcodes.com/
CVE ID: CVE-2025-4504 State: PUBLISHED Published: 2025-05-10T14:31:05.328Z Last Updated: 2025-05-12T17:45:57.576Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Online College Library System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Online College Library System 1.0. It has been classified as critical. Affected is an unknown function of the file /index.php. The manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
closed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308220 - https://vuldb.com/?ctiid.308220 - https://vuldb.com/?submit.567156 - https://github.com/krookies/cve/issues/1 - https://www.sourcecodester.com/
CVE ID: CVE-2025-4505 State: PUBLISHED Published: 2025-05-10T15:31:06.363Z Last Updated: 2025-05-12T17:45:16.491Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Apartment Visitors Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /category.php. The manipulation of the argument categoryname leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
ely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308221 - https://vuldb.com/?ctiid.308221 - https://vuldb.com/?submit.567166 - https://github.com/y77-88/myCVE/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-4506 State: PUBLISHED Published: 2025-05-10T16:00:08.630Z Last Updated: 2025-05-12T17:44:34.642Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Online Food Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/menu-router.php. The manipulation of the argument 1_price leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
en disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308222 - https://vuldb.com/?ctiid.308222 - https://vuldb.com/?submit.567169 - https://github.com/TEhS411/cve/issues/5 - https://www.campcodes.com/
CVE ID: CVE-2025-4507 State: PUBLISHED Published: 2025-05-10T16:31:04.801Z Last Updated: 2025-05-12T15:06:31.715Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Online Food Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /routers/add-item.php. The manipulation of the argument price leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308223 - h
ublic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308223 - https://vuldb.com/?ctiid.308223 - https://vuldb.com/?submit.567170 - https://github.com/TEhS411/cve/issues/6 - https://www.campcodes.com/