Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-7925 State: PUBLISHED Published: 2025-07-21T12:32:07.271Z Last Updated: 2025-07-21T13:07:44.470Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Online Banquet Booking System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in PHPGurukul Online Banquet Booking System 1.0. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument user_login/userpassword leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: -
tack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317054 - https://vuldb.com/?ctiid.317054 - https://vuldb.com/?submit.618895 - https://vuldb.com/?submit.618907 - https://github.com/LagonGit/ReportCVE/issues/2 - https://drive.google.com/file/d/1CnrQn_-nSWLCUXJrwgrDFyI5D5MOzD-n/view - https://phpgurukul.com/
CVE ID: CVE-2025-7926 State: PUBLISHED Published: 2025-07-21T13:32:07.064Z Last Updated: 2025-07-21T15:02:38.108Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Online Banquet Booking System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in PHPGurukul Online Banquet Booking System 1.0. This affects an unknown part of the file /admin/booking-search.php. The manipulation of the argument searchdata leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment
emotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317055 - https://vuldb.com/?ctiid.317055 - https://vuldb.com/?submit.618909 - https://github.com/LagonGit/ReportCVE/issues/4 - https://drive.google.com/file/d/1SHG0BMHHfc-6XDm43_zYVrcZEYiUvdP9/view - https://phpgurukul.com/
CVE ID: CVE-2025-7927 State: PUBLISHED Published: 2025-07-21T14:32:06.080Z Last Updated: 2025-07-21T14:50:35.086Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Online Banquet Booking System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Online Banquet Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/view-user-queries.php. The manipulation of the argument viewid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
e exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317056 - https://vuldb.com/?ctiid.317056 - https://vuldb.com/?submit.618941 - https://github.com/LagonGit/ReportCVE/issues/5 - https://github.com/LagonGit/ReportCVE/issues/5#issue-3245176689 - https://phpgurukul.com/
CVE ID: CVE-2025-7928 State: PUBLISHED Published: 2025-07-21T15:02:05.610Z Last Updated: 2025-07-21T15:42:24.418Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Church Donation System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Church Donation System 1.0 and classified as critical. This issue affects some unknown processing of the file /members/edit_user.php. The manipulation of the argument firstname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - C
been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317057 - https://vuldb.com/?ctiid.317057 - https://vuldb.com/?submit.618942 - https://github.com/n0name-yang/myCVE/issues/13 - https://code-projects.org/
CVE ID: CVE-2025-7929 State: PUBLISHED Published: 2025-07-21T15:32:05.745Z Last Updated: 2025-07-21T15:46:21.162Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Church Donation System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is an unknown function of the file /members/edit_Members.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes
t has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317058 - https://vuldb.com/?ctiid.317058 - https://vuldb.com/?submit.618943 - https://github.com/n0name-yang/myCVE/issues/14 - https://code-projects.org/
CVE ID: CVE-2025-7930 State: PUBLISHED Published: 2025-07-21T16:02:05.524Z Last Updated: 2025-07-21T18:51:31.692Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Church Donation System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /members/add_members.php. The manipulation of the argument mobile leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Addition
tely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317059 - https://vuldb.com/?ctiid.317059 - https://vuldb.com/?submit.618944 - https://github.com/n0name-yang/myCVE/issues/15 - https://code-projects.org/
CVE ID: CVE-2025-7931 State: PUBLISHED Published: 2025-07-21T16:32:05.823Z Last Updated: 2025-07-21T17:56:23.779Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Church Donation System Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in code-projects Church Donation System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /members/admin_pic.php. The manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317060 - https://vuldb.com/?ctiid.317060 - https://vuldb.com/?submit.618946 - https://github.com/n0name-yang/myCVE/issues/16 - https://code-projects.org/
CVE ID: CVE-2025-7932 State: PUBLISHED Published: 2025-07-21T17:02:06.388Z Last Updated: 2025-07-21T17:51:28.544Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR‑817L Problem Types: CWE-77, CWE-74 Description: A vulnerability classified as critical has been found in D-Link DIR‑817L up to 1.04B01. This affects the function lxmldbc_system of the file ssdpcgi. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317061 - https://vuldb.com/?ctiid.317061 - htt
alyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317061 - https://vuldb.com/?ctiid.317061 - https://vuldb.com/?submit.618951 - https://github.com/Patr1ck-S/Patr1ck-S.github.io/blob/main/D-Link%20DIR%E2%80%91817L%20has%20a%20remote%20arbitrary%20command%20execution%20vulnerability%20in%20ssdpcgi(1).md - https://www.dlink.com/
CVE ID: CVE-2025-7933 State: PUBLISHED Published: 2025-07-21T18:02:05.912Z Last Updated: 2025-07-21T18:47:40.382Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/settings_update.php of the component Setting Handler. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
motely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317062 - https://vuldb.com/?ctiid.317062 - https://vuldb.com/?submit.618952 - https://github.com/zhaodaojie/cve/issues/5 - https://www.campcodes.com/
CVE ID: CVE-2025-7934 State: PUBLISHED Published: 2025-07-21T18:32:10.177Z Last Updated: 2025-07-21T18:39:32.716Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: fuyang_lipengjun Products: platform Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in fuyang_lipengjun platform up to ca9aceff6902feb7b0b6bf510842aea88430796a. This issue affects the function queryPage of the file platform-schedule/src/main/java/com/platform/controller/ScheduleJobController.java. The manipulation of the argument beanName leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the publi
ument beanName leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317063 - https://vuldb.com/?ctiid.317063 - https://vuldb.com/?submit.618977 - https://gitee.com/fuyang_lipengjun/platform/issues/ICLILS
CVE ID: CVE-2025-7935 State: PUBLISHED Published: 2025-07-21T19:02:10.720Z Last Updated: 2025-07-21T19:13:17.015Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: fuyang_lipengjun Products: platform Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in fuyang_lipengjun platform up to ca9aceff6902feb7b0b6bf510842aea88430796a. Affected is the function SysLogController of the file platform-admin/src/main/java/com/platform/controller/SysLogController.java. The manipulation of the argument key leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may
ds to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317064 - https://vuldb.com/?ctiid.317064 - https://vuldb.com/?submit.618978 - https://gitee.com/fuyang_lipengjun/platform/issues/ICLIKX
CVE ID: CVE-2025-7936 State: PUBLISHED Published: 2025-07-21T19:32:10.267Z Last Updated: 2025-07-21T20:00:04.935Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: fuyang_lipengjun Products: platform Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in fuyang_lipengjun platform up to ca9aceff6902feb7b0b6bf510842aea88430796a and classified as critical. Affected by this vulnerability is the function queryPage of the file com/platform/controller/ScheduleJobLogController.java. The manipulation of the argument beanName/methodName leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be
ame leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317065 - https://vuldb.com/?ctiid.317065 - https://vuldb.com/?submit.618979 - https://gitee.com/fuyang_lipengjun/platform/issues/ICLIK1
CVE ID: CVE-2025-7937 State: PUBLISHED Published: 2025-09-19T02:09:33.323Z Last Updated: 2025-09-25T09:17:12.107Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: SMCI Products: MBD-X12STW Problem Types: CWE-347 Description: There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW . An attacker can update the system firmware with a specially crafted image. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.supermicro.com/en/support/security_BMC_IPMI_Sept_2025
CVE ID: CVE-2025-7938 State: PUBLISHED Published: 2025-07-21T20:02:05.704Z Last Updated: 2025-07-22T16:04:37.544Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R) Vendors: jerryshensjf Products: JPACookieShop 蛋糕商城JPA版 Problem Types: CWE-639, CWE-285 Description: A vulnerability was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 1.0 and classified as critical. This issue affects the function updateGoods of the file GoodsController.java. The manipulation leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
en disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317075 - https://vuldb.com/?ctiid.317075 - https://vuldb.com/?submit.618985 - https://github.com/Bemcliu/cve-reports/blob/main/cve-02-%E8%9B%8B%E7%B3%95%E5%95%86%E5%9F%8EJPA%E7%89%88-Privilege%20Escalation/readme.md
CVE ID: CVE-2025-7939 State: PUBLISHED Published: 2025-07-21T20:32:05.579Z Last Updated: 2025-07-22T16:05:12.575Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:ND/RC:UR) Vendors: jerryshensjf Products: JPACookieShop 蛋糕商城JPA版 Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 1.0. It has been classified as critical. Affected is the function addGoods of the file GoodsController.java. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317076 - https://vuldb.com/?ctiid.317076 - https://vuldb.com/?s
SA ADP Vulnrichment: References: - https://vuldb.com/?id.317076 - https://vuldb.com/?ctiid.317076 - https://vuldb.com/?submit.618986 - https://github.com/Bemcliu/cve-reports/blob/main/cve-03-%E8%9B%8B%E7%B3%95%E5%95%86%E5%9F%8EJPA%E7%89%88-Arbitrary%20File%20Upload/readme.md
CVE ID: CVE-2025-7940 State: PUBLISHED Published: 2025-07-21T21:02:05.867Z Last Updated: 2025-07-23T18:29:43.343Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: Genshin Products: Albedo Cat House App Problem Types: CWE-926 Description: A vulnerability was found in Genshin Albedo Cat House App 1.0.2 on Android. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.house.auscat. The manipulation leads to improper export of android application components. Local access is required to approach this attack. The exploit has been disclosed to the public and
lication components. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317077 - https://vuldb.com/?ctiid.317077 - https://vuldb.com/?submit.619036 - https://github.com/KMov-g/androidapps/blob/main/com.house.auscat.md - https://github.com/KMov-g/androidapps/blob/main/com.house.auscat.md#video-proof-of-concept
CVE ID: CVE-2025-7941 State: PUBLISHED Published: 2025-07-21T21:32:07.345Z Last Updated: 2025-07-23T16:45:23.651Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Time Table Generator System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in PHPGurukul Time Table Generator System 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
e exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317082 - https://vuldb.com/?ctiid.317082 - https://vuldb.com/?submit.619141 - https://github.com/LagonGit/ReportCVE/issues/6 - https://drive.google.com/file/d/19C2IWKR38Qqw7RLNn1nWzvWv4GszgPnU/view - https://phpgurukul.com/
CVE ID: CVE-2025-7942 State: PUBLISHED Published: 2025-07-21T22:02:06.857Z Last Updated: 2025-07-23T16:17:38.914Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Taxi Stand Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in PHPGurukul Taxi Stand Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP
e launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317083 - https://vuldb.com/?ctiid.317083 - https://vuldb.com/?submit.619169 - https://github.com/LagonGit/ReportCVE/issues/7 - https://phpgurukul.com/
CVE ID: CVE-2025-7943 State: PUBLISHED Published: 2025-07-21T22:32:07.210Z Last Updated: 2025-07-23T16:13:20.951Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Taxi Stand Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in PHPGurukul Taxi Stand Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/search-autoortaxi.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnri
ched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317084 - https://vuldb.com/?ctiid.317084 - https://vuldb.com/?submit.619178 - https://github.com/LagonGit/ReportCVE/issues/8 - https://phpgurukul.com/
CVE ID: CVE-2025-7944 State: PUBLISHED Published: 2025-07-21T23:02:07.830Z Last Updated: 2025-07-23T16:11:39.426Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Taxi Stand Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in PHPGurukul Taxi Stand Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /search.php. The manipulation of the argument searchdata leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317085 - https://vuldb.com/?ctiid.317085 - https://vuldb.com/?submit.619179 - https://github.com/LagonGit/ReportCVE/issues/9 - https://phpgurukul.com/
CVE ID: CVE-2025-7945 State: PUBLISHED Published: 2025-07-21T23:32:06.071Z Last Updated: 2025-07-23T16:08:04.393Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:ND/RL:ND/RC:UR) Vendors: D-Link Products: DIR-513 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in D-Link DIR-513 up to 20190831. It has been declared as critical. This vulnerability affects the function formSetWanDhcpplus of the file /goform/formSetWanDhcpplus. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
y affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317086 - https://vuldb.com/?ctiid.317086 - https://vuldb.com/?submit.619200 - https://github.com/LYN1ng/D-linkdir513/blob/main/Dlink_DIR-513_Buffer_Overflow_Vulnerability.md - https://www.dlink.com/
CVE ID: CVE-2025-7946 State: PUBLISHED Published: 2025-07-22T00:02:06.214Z Last Updated: 2025-07-22T13:29:52.965Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Apartment Visitors Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /search-visitor.php of the component HTTP POST Request Handler. The manipulation of the argument searchdata leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used
cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317087 - https://vuldb.com/?ctiid.317087 - https://vuldb.com/?submit.619264 - https://github.com/HieuGITLAB/my-cves/issues/11 - https://phpgurukul.com/
CVE ID: CVE-2025-7947 State: PUBLISHED Published: 2025-07-22T00:32:05.102Z Last Updated: 2025-07-22T13:27:57.463Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: n/a Products: jshERP Problem Types: CWE-285, CWE-266 Description: A vulnerability classified as critical has been found in jshERP up to 3.5. Affected is an unknown function of the file /user/delete of the component Account Handler. The manipulation of the argument ID leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317088 - ht
blic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317088 - https://vuldb.com/?ctiid.317088 - https://vuldb.com/?submit.619276 - https://github.com/jishenghua/jshERP/issues/124