Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-6936 State: PUBLISHED Published: 2025-07-01T00:02:05.868Z Last Updated: 2025-07-01T19:17:33.429Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Pizza Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file /addpro.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314457 - https://vuldb.com/?ctiid.314457 - https://vuldb.com/?submit.605728 - https://github.com/Catcheryp/CVE/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-6937 State: PUBLISHED Published: 2025-07-01T00:32:05.886Z Last Updated: 2025-07-01T14:49:07.478Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Pizza Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /large.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
en disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314458 - https://vuldb.com/?ctiid.314458 - https://vuldb.com/?submit.605748 - https://github.com/Catcheryp/CVE/issues/3 - https://code-projects.org/
CVE ID: CVE-2025-6938 State: PUBLISHED Published: 2025-07-01T01:32:05.186Z Last Updated: 2025-07-01T13:46:50.719Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Pizza Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Simple Pizza Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /editcus.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314459 - https://vuldb.com/?ctiid.314459 - https://vuldb.com/?submit.605749 - https://github.com/Catcheryp/CVE/issues/4 - https://code-projects.org/
CVE ID: CVE-2025-6939 State: PUBLISHED Published: 2025-07-01T02:02:09.824Z Last Updated: 2025-07-01T13:20:36.201Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: A3002RU Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical has been found in TOTOLINK A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the file /boafrm/formWlSiteSurvey of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
motely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314460 - https://vuldb.com/?ctiid.314460 - https://vuldb.com/?submit.605860 - https://github.com/awindog/cve/blob/main/688/30.md - https://www.totolink.net/
CVE ID: CVE-2025-6940 State: PUBLISHED Published: 2025-07-01T02:32:07.501Z Last Updated: 2025-07-01T13:14:52.514Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: A702R Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical was found in TOTOLINK A702R 4.0.0-B20230721.1521. Affected by this vulnerability is an unknown functionality of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vul
aunched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314461 - https://vuldb.com/?ctiid.314461 - https://vuldb.com/?submit.605861 - https://github.com/awindog/cve/blob/main/688/27.md - https://github.com/awindog/cve/blob/main/688/27.md#poc - https://www.totolink.net/
CVE ID: CVE-2025-6941 State: PUBLISHED Published: 2025-09-30T04:27:07.055Z Last Updated: 2025-09-30T15:39:46.996Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: latepoint Products: LatePoint – Calendar Booking Plugin for Appointments and Events Problem Types: CWE-79 Description: The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the 'latepoint_resources' shortcode in all versions up to, and including, 5.1.94 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an
t sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c05575ef-3140-4340-9b4b-1803a8045ce0?source=cve - https://wordpress.org/plugins/latepoint/#developers - https://plugins.trac.wordpress.org/browser/latepoint/tags/5.1.93/lib/helpers/shortcodes_helper.php - https://plugins.trac.wordpress.org/changeset/3366851
CVE ID: CVE-2025-6942 State: PUBLISHED Published: 2025-07-02T15:49:16.894Z Last Updated: 2025-07-02T19:46:25.837Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Delinea Products: Secret Server Problem Types: CWE-639 Description: The distributed engine versions 8.4.39.0 and earlier of Secret Server versions 11.7.49 and earlier can be exploited during an initial authorization event that would allow an attacker to impersonate another distributed engine. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000060.htm - https://docs.delinea.com/online-help/secret-server/release-
ine-help/secret-server/release-notes/ss-rn-11-7-000060.htm - https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000061.htm - https://docs.delinea.com/online-help/secret-server-changelog/secret-server-change-log.htm?cshid=secret-server-changelog#Friday,_November_22,_2024 - https://trust.delinea.com/?tcuUid=2b68edca-7930-438d-b960-2d6da07cdde9
CVE ID: CVE-2025-6943 State: PUBLISHED Published: 2025-07-02T15:45:01.702Z Last Updated: 2025-07-02T15:59:43.816Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: Delinea Products: Secret Server Problem Types: CWE-269 Description: Secret Server version 11.7 and earlier is vulnerable to a SQL report creation vulnerability that allows an administrator to gain access to restricted tables. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000060.htm - https://docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000061.htm - https://docs.delinea.com/online-help/s
/docs.delinea.com/online-help/secret-server/release-notes/ss-rn-11-7-000061.htm - https://docs.delinea.com/online-help/secret-server-changelog/secret-server-change-log.htm?cshid=secret-server-changelog#Friday,_November_22,_2024 - https://trust.delinea.com
CVE ID: CVE-2025-6944 State: PUBLISHED Published: 2025-07-04T05:23:36.104Z Last Updated: 2025-07-07T15:01:41.604Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: undsgn Products: Uncode Core Problem Types: CWE-79 Description: The Uncode Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'uncode_hl_text' and 'uncode_text_icon' shortcodes in all versions up to, and including, 2.9.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute when
ated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/52935b60-3ec5-45e6-9d12-200bf107c9df?source=cve - https://support.undsgn.com/hc/en-us/articles/213454129-Change-Log
CVE ID: CVE-2025-6945 State: PUBLISHED Published: 2025-11-15T08:04:29.739Z Last Updated: 2025-11-17T20:16:05.892Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-77 Description: GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to leak sensitive information from confidential issues by injecting hidden prompts into merge request comments. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/ - h
A ADP Vulnrichment: References: - https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/ - https://gitlab.com/gitlab-org/gitlab/-/issues/552611 - https://hackerone.com/reports/3173458
CVE ID: CVE-2025-6947 State: PUBLISHED Published: 2025-09-15T21:18:36.390Z Last Updated: 2025-09-16T13:50:53.924Z Vendors: WatchGuard Products: Fireware OS Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS via the SIP Proxy module. This vulnerability requires an authenticated administrator session to a locally managed Firebox. This issue affects Firebox: from 12.0 through 12.11.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00012
CVE ID: CVE-2025-6948 State: PUBLISHED Published: 2025-07-10T08:30:39.878Z Last Updated: 2025-07-11T03:55:22.409Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-79 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.6, 18.0 before 18.0.4, and 18.1 before 18.1.2 that, under certain conditions, could have allowed a successful attacker to execute actions on behalf of users by injecting malicious content. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/552616 - https://hackerone.com/reports/3227316
CVE ID: CVE-2025-6949 State: PUBLISHED Published: 2025-10-17T03:12:02.798Z Last Updated: 2025-10-17T14:27:17.368Z Vendors: Moxa Products: EDR-G9010 Series, EDR-8010 Series, EDF-G1002-BP Series, TN-4900 Series, NAT-102 Series, NAT-108 Series, OnCell G4302-LTE4 Series Problem Types: CWE-250 Description: An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A critical authorization flaw in the API allows an authenticated, low-privileged user to create a new administrator account, including accounts with usernames identical to existing users. In certain scenarios, this vulnerability could allow an attacker to gain full admin
ernames identical to existing users. In certain scenarios, this vulnerability could allow an attacker to gain full administrative control over the affected device, leading to potential account impersonation. While successful exploitation can severely impact the confidentiality, integrity, and availability of the affected device itself, there is no loss of confidentiality or integrity within any subsequent systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-258121-cve-2025-6892,-cve-2025-6893,-cve-2025-6894,-cve-2025-6949,-cve-2025-6950-multiple-vulnerabilities-in-netwo
CVE ID: CVE-2025-6950 State: PUBLISHED Published: 2025-10-17T03:19:48.223Z Last Updated: 2025-10-17T14:26:45.416Z Vendors: Moxa Products: EDR-G9010 Series, EDR-8010 Series, EDF-G1002-BP Series, TN-4900 Series, NAT-102 Series, NAT-108 Series, OnCell G4302-LTE4 Series Problem Types: CWE-798 Description: An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers. The system employs a hard-coded secret key to sign JSON Web Tokens (JWT) used for authentication. This insecure implementation allows an unauthenticated attacker to forge valid tokens, thereby bypassing authentication controls and impersonating any user. Exploitation of this vul
er to forge valid tokens, thereby bypassing authentication controls and impersonating any user. Exploitation of this vulnerability can result in complete system compromise, enabling unauthorized access, data theft, and full administrative control over the affected device. While successful exploitation can severely impact the confidentiality, integrity, and availability of the affected device itself, there is no loss of confidentiality or integrity within any subsequent systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.moxa.com/en/support/product-support/security-advisory/mpsa-258121-cve-2025-6892,-cve-2025-6893,-cve-2025-6894,-cve-2025-6949,-cve-2025-6950-
product-support/security-advisory/mpsa-258121-cve-2025-6892,-cve-2025-6893,-cve-2025-6894,-cve-2025-6949,-cve-2025-6950-multiple-vulnerabilities-in-netwo
CVE ID: CVE-2025-6951 State: PUBLISHED Published: 2025-07-01T11:32:05.197Z Last Updated: 2025-07-01T13:20:21.685Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: SAFECAM Products: X300 Problem Types: CWE-1392 Description: A vulnerability classified as problematic was found in SAFECAM X300 up to 20250611. This vulnerability affects unknown code of the component FTP Service. The manipulation leads to use of default credentials. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additio
the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314488 - https://vuldb.com/?ctiid.314488 - https://vuldb.com/?submit.595454 - https://github.com/geo-chen/SAFECAM
CVE ID: CVE-2025-6952 State: PUBLISHED Published: 2025-07-01T11:32:07.418Z Last Updated: 2025-07-01T13:07:07.279Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C) Vendors: n/a Products: Open5GS Problem Types: CWE-617 Description: A vulnerability, which was classified as problematic, has been found in Open5GS up to 2.7.5. This issue affects the function amf_state_operational of the file src/amf/amf-sm.c of the component AMF Service. The manipulation leads to reachable assertion. It is possible to launch the attack on the local host. The identifier of the patch is 53e9e059ed96b940f7ddcd9a2b68cb512524d5db. It is recommended to apply a patch to fix this issue.
ntifier of the patch is 53e9e059ed96b940f7ddcd9a2b68cb512524d5db. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314489 - https://vuldb.com/?ctiid.314489 - https://vuldb.com/?submit.605312 - https://github.com/open5gs/open5gs/issues/3938 - https://github.com/open5gs/open5gs/issues/3938#issuecomment-3012139813 - https://github.com/open5gs/open5gs/commit/53e9e059ed96b940f7ddcd9a2b68cb512524d5db
CVE ID: CVE-2025-6953 State: PUBLISHED Published: 2025-07-01T13:32:06.793Z Last Updated: 2025-07-01T13:57:11.603Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: A3002RU Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, was found in TOTOLINK A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnr
ttack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314490 - https://vuldb.com/?ctiid.314490 - https://vuldb.com/?submit.605874 - https://github.com/d2pq/cve/blob/main/616/26.md - https://github.com/d2pq/cve/blob/main/616/26.md#poc - https://www.totolink.net/
CVE ID: CVE-2025-6954 State: PUBLISHED Published: 2025-07-01T13:32:09.016Z Last Updated: 2025-07-01T13:53:24.905Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Employee Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Campcodes Employee Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /applyleave.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
it has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314491 - https://vuldb.com/?ctiid.314491 - https://vuldb.com/?submit.605892 - https://github.com/ez-lbz/poc/issues/32 - https://www.campcodes.com/
CVE ID: CVE-2025-6955 State: PUBLISHED Published: 2025-07-01T14:02:08.490Z Last Updated: 2025-07-01T14:37:11.378Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Employee Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /process/aprocess.php. The manipulation of the argument mailuid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
it has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314492 - https://vuldb.com/?ctiid.314492 - https://vuldb.com/?submit.605894 - https://github.com/ez-lbz/poc/issues/33 - https://www.campcodes.com/
CVE ID: CVE-2025-6956 State: PUBLISHED Published: 2025-07-01T14:02:10.934Z Last Updated: 2025-07-01T14:40:10.598Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Employee Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Employee Management System 1.0. It has been classified as critical. This affects an unknown part of the file /changepassemp.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314493 - https://vuldb.com/?ctiid.314493 - https://vuldb.com/?submit.605895 - https://github.com/ez-lbz/poc/issues/34 - https://www.campcodes.com/
CVE ID: CVE-2025-6957 State: PUBLISHED Published: 2025-07-01T14:32:05.909Z Last Updated: 2025-07-01T15:13:40.570Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Employee Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Employee Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /process/eprocess.php. The manipulation of the argument mailuid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
s been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314494 - https://vuldb.com/?ctiid.314494 - https://vuldb.com/?submit.605896 - https://github.com/ez-lbz/poc/issues/35 - https://www.campcodes.com/
CVE ID: CVE-2025-6958 State: PUBLISHED Published: 2025-07-01T14:32:07.870Z Last Updated: 2025-07-01T14:54:16.563Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Employee Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Employee Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.31
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314495 - https://vuldb.com/?ctiid.314495 - https://vuldb.com/?submit.605897 - https://github.com/ez-lbz/poc/issues/36 - https://www.campcodes.com/
CVE ID: CVE-2025-6959 State: PUBLISHED Published: 2025-07-01T15:02:06.228Z Last Updated: 2025-07-01T15:32:19.693Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Employee Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in Campcodes Employee Management System 1.0. Affected is an unknown function of the file /eloginwel.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314
o the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314496 - https://vuldb.com/?ctiid.314496 - https://vuldb.com/?submit.605899 - https://github.com/ez-lbz/poc/issues/37 - https://www.campcodes.com/