Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-4460 State: PUBLISHED Published: 2025-05-09T04:00:09.052Z Last Updated: 2025-05-09T16:18:03.373Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: TOTOLINK Products: N150RT Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the component URL Filtering Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308079 - https://vuldb.com/?ctiid.308079 - https://v
Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308079 - https://vuldb.com/?ctiid.308079 - https://vuldb.com/?submit.565956 - https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/N150RT/XSS_Url_filering - https://www.totolink.net/
CVE ID: CVE-2025-4461 State: PUBLISHED Published: 2025-05-09T04:31:06.337Z Last Updated: 2025-05-09T15:56:11.741Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: TOTOLINK Products: N150RT Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in TOTOLINK N150RT 3.4.0-B20190525. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308080 - https://vuldb.com/?ctiid.308080 - https://vuld
es: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308080 - https://vuldb.com/?ctiid.308080 - https://vuldb.com/?submit.565957 - https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/N150RT/XSS_Virtual_Server - https://www.totolink.net/
CVE ID: CVE-2025-4462 State: PUBLISHED Published: 2025-05-09T05:00:07.937Z Last Updated: 2025-05-09T15:51:58.290Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: TOTOLINK Products: N150RT Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. This issue affects some unknown processing of the file /boafrm/formWsc. The manipulation of the argument localPin leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308081 - https://vuldb.com/
used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308081 - https://vuldb.com/?ctiid.308081 - https://vuldb.com/?submit.565958 - https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/N150RT/BufferOverflow_formWsc_2 - https://www.totolink.net/
CVE ID: CVE-2025-4463 State: PUBLISHED Published: 2025-05-09T05:00:10.798Z Last Updated: 2025-05-09T13:26:49.664Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in itsourcecode Gym Management System 1.0. Affected is an unknown function of the file /ajax.php?action=save_package. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308
o the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308082 - https://vuldb.com/?ctiid.308082 - https://vuldb.com/?submit.565984 - https://github.com/a25962208/cve/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-4464 State: PUBLISHED Published: 2025-05-09T05:31:05.104Z Last Updated: 2025-05-09T13:21:22.868Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in itsourcecode Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=save_plan. The manipulation of the argument plan leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
en disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308083 - https://vuldb.com/?ctiid.308083 - https://vuldb.com/?submit.565990 - https://github.com/a25962208/cve/issues/2 - https://itsourcecode.com/
CVE ID: CVE-2025-4465 State: PUBLISHED Published: 2025-05-09T05:31:07.250Z Last Updated: 2025-05-09T13:20:23.403Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in itsourcecode Gym Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?action=save_schedule. The manipulation of the argument member_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308084 - https://vuldb.com/?ctiid.308084 - https://vuldb.com/?submit.566104 - https://github.com/TEhS411/cve/issues/3 - https://itsourcecode.com/
CVE ID: CVE-2025-4466 State: PUBLISHED Published: 2025-05-09T06:00:07.029Z Last Updated: 2025-05-09T15:49:55.537Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?action=save_payment. The manipulation of the argument registration_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308085 - https://vuldb.com/?ctiid.308085 - https://vuldb.com/?submit.566105 - https://github.com/TEhS411/cve/issues/4 - https://itsourcecode.com/
CVE ID: CVE-2025-4467 State: PUBLISHED Published: 2025-05-09T06:31:04.641Z Last Updated: 2025-05-15T06:57:31.447Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Student Clearance System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-admin.php. The manipulation of the argument id/txtfullname/txtemail/cmddesignation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vu
nitiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308086 - https://vuldb.com/?ctiid.308086 - https://vuldb.com/?submit.566245 - https://github.com/Colorado-all/cve/blob/main/Online%20Student%20Clearance%20System/SQL-2.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-4468 State: PUBLISHED Published: 2025-05-09T06:31:06.903Z Last Updated: 2025-05-09T15:44:37.693Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Online Student Clearance System Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit-photo.php. The manipulation of the argument userImage leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308087 - https://vuldb.com/?ctiid.308087 - https://vuldb.com/?submit.566246 - https://github.com/Colorado-all/cve/blob/main/Online%20Student%20Clearance%20System/upload.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-4469 State: PUBLISHED Published: 2025-05-09T07:00:06.081Z Last Updated: 2025-05-16T13:10:29.605Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Online Student Clearance System Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in SourceCodester Online Student Clearance System 1.0. Affected is an unknown function of the file /admin/add-admin.php. The manipulation of the argument txtusername/txtfullname/txtpassword/txtpassword2 leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes:
to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308088 - https://vuldb.com/?ctiid.308088 - https://vuldb.com/?submit.566248 - https://github.com/Colorado-all/cve/blob/main/Online%20Student%20Clearance%20System/xss-1.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-4470 State: PUBLISHED Published: 2025-05-09T07:00:09.063Z Last Updated: 2025-05-09T16:11:36.620Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: SourceCodester Products: Online Student Clearance System Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in SourceCodester Online Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add-student.php. The manipulation of the argument Fullname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additio
otely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308089 - https://vuldb.com/?ctiid.308089 - https://vuldb.com/?submit.566249 - https://github.com/Colorado-all/cve/blob/main/Online%20Student%20Clearance%20System/xss-2.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-4471 State: PUBLISHED Published: 2025-05-09T07:31:04.165Z Last Updated: 2025-05-10T07:45:20.475Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Jewelery Store Management system Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, has been found in code-projects Jewelery Store Management system 1.0. Affected by this issue is some unknown functionality of the component Search Item View. The manipulation of the argument str2 leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Additional A
w. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308090 - https://vuldb.com/?ctiid.308090 - https://vuldb.com/?submit.566273 - https://github.com/BinX-Lab/Store_buffer_overflow - https://code-projects.org/
CVE ID: CVE-2025-4472 State: PUBLISHED Published: 2025-05-09T08:00:05.635Z Last Updated: 2025-05-09T15:36:06.113Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Departmental Store Management System Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in code-projects Departmental Store Management System 1.0. It has been classified as critical. Affected is the function bill. The manipulation of the argument Item Code leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichmen
cal host. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308094 - https://vuldb.com/?ctiid.308094 - https://vuldb.com/?submit.566516 - https://github.com/zzzxc643/cve/blob/main/Department_Store_Management_System.md - https://code-projects.org/
CVE ID: CVE-2025-4473 State: PUBLISHED Published: 2025-05-13T06:40:54.828Z Last Updated: 2025-05-13T13:53:38.690Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: vinoth06 Products: Frontend Dashboard Problem Types: CWE-285 Description: The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajax_request() function in versions 1.0 to 2.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to control where the plugin sends outgoing emails. By pointing SMTP to their own server, attackers could capture password reset emails intended for administrators, and
ls. By pointing SMTP to their own server, attackers could capture password reset emails intended for administrators, and elevate their privileges for full site takeover. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2f3a10b5-b024-4b3f-af67-b7fcb997d368?source=cve - https://plugins.trac.wordpress.org/browser/frontend-dashboard/tags/2.2.7/route/class-fed-request.php#L35 - https://wordpress.org/plugins/frontend-dashboard/#developers - https://plugins.trac.wordpress.org/browser/frontend-dashboard/tags/2.2.7/includes/admin/function-admin.php#L3055 - https://plugins.trac.wordpress.org/browser/frontend-dashboard/tags/2.2.7
2.2.7/includes/admin/function-admin.php#L3055 - https://plugins.trac.wordpress.org/browser/frontend-dashboard/tags/2.2.7/includes/admin/layout/settings_tab/email/class-fed-email.php#L122 - https://plugins.trac.wordpress.org/changeset/3290623/
CVE ID: CVE-2025-4474 State: PUBLISHED Published: 2025-05-13T06:40:56.651Z Last Updated: 2025-05-13T13:16:32.178Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: vinoth06 Products: Frontend Dashboard Problem Types: CWE-285 Description: The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the fed_admin_setting_form_function() function in versions 1.0 to 2.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to overwrite the plugin’s 'register' role setting to make new user registrations default to the administrator role, leading to an elevation of privi
egister' role setting to make new user registrations default to the administrator role, leading to an elevation of privileges to that of an administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/fb61159a-e501-4c55-a384-b6049e0f0bc8?source=cve - https://wordpress.org/plugins/frontend-dashboard/#developers - https://plugins.trac.wordpress.org/browser/frontend-dashboard/tags/2.2.7/includes/admin/request/admin.php#L26 - https://plugins.trac.wordpress.org/browser/frontend-dashboard/tags/2.2.7/includes/admin/request/tabs/login.php#L14 - https://plugins.trac.wordpress.org/changeset/3290623/
CVE ID: CVE-2025-4475 State: REJECTED Published: 2025-05-08T20:06:23.448Z Last Updated: 2025-05-08T22:56:24.551Z Description: No description available.
CVE ID: CVE-2025-4476 State: PUBLISHED Published: 2025-05-16T17:56:58.302Z Last Updated: 2025-11-21T07:25:08.776Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-476 Description: A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives a 401 (Unauthorized) HTTP response containing a specifically crafted domain parameter within the WWW-Authenticate header. Processing this malformed header can lea
ing a specifically crafted domain parameter within the WWW-Authenticate header. Processing this malformed header can lead to a crash of the client application using libsoup. An attacker could exploit this by setting up a malicious HTTP server. If a user's application using the vulnerable libsoup library connects to this malicious server, it could result in a denial-of-service. Successful exploitation requires tricking a user's client application into connecting to the attacker's malicious server. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-4476 - https://bugzilla.redhat.com/show_bug.cgi?id=2366513
CVE ID: CVE-2025-4477 State: PUBLISHED Published: 2025-05-19T05:58:15.424Z Last Updated: 2025-05-19T13:33:38.540Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: TeamT5 Products: ThreatSonar Anti-Ransomware Problem Types: CWE-862 Description: The ThreatSonar Anti-Ransomware from TeamT5 has a Privilege Escalation vulnerability, allowing remote attackers with intermediate privileges to escalate their privileges to highest administrator level through a specific API. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-10129-18ea3-1.html - https://www.twcert.org.tw/en/cp-139-10130-c0959-2.html
CVE ID: CVE-2025-4478 State: PUBLISHED Published: 2025-05-16T14:22:17.265Z Last Updated: 2025-11-06T23:06:32.612Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-476 Description: A flaw was found in the FreeRDP used by Anaconda's remote install feature, where a crafted RDP packet could trigger a segmentation fault. This issue causes the service to crash and remain defunct, resulting in a denial of service. It occurs pre-boot and is likely due to a NULL pointer dereference. Rebooting is required to recover the system. Additional Analyst Notes
t and is likely due to a NULL pointer dereference. Rebooting is required to recover the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:9307 - https://access.redhat.com/security/cve/CVE-2025-4478 - https://bugzilla.redhat.com/show_bug.cgi?id=2365232 - https://github.com/FreeRDP/FreeRDP/pull/11573
CVE ID: CVE-2025-4479 State: PUBLISHED Published: 2025-06-19T03:40:13.856Z Last Updated: 2025-06-20T13:12:04.362Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: xpeedstudio Products: ElementsKit Elementor Addons and Templates Problem Types: CWE-79 Description: The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin image comparison widget's before/after labels in all versions up to, and including, 3.5.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to in
supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c2995828-8a3e-400d-9e2b-aba8fd17cf00?source=cve - https://plugins.trac.wordpress.org/browser/elementskit-lite/tags/3.5.0/widgets/init/assets/js/widget-scripts.js - https://plugins.trac.wordpress.org/browser/elementskit-lite/tags/3.5.0/widgets/init/assets/js/elementor.js - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=331182
ts/init/assets/js/elementor.js - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3311822%40elementskit-lite&old=3300179%40elementskit-lite&sfp_email=&sfph_mail=
CVE ID: CVE-2025-4480 State: PUBLISHED Published: 2025-05-09T16:31:04.879Z Last Updated: 2025-05-09T19:53:49.879Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Simple College Management System Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in code-projects Simple College Management System 1.0. It has been declared as critical. This vulnerability affects the function input of the component Add New Student. The manipulation of the argument name/branch leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Additio
s possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308194 - https://vuldb.com/?ctiid.308194 - https://vuldb.com/?submit.566525 - https://github.com/zzzxc643/cve/blob/main/SIMPLE_COLLEGE_MANAGEMENT_SYSTEM.md - https://code-projects.org/
CVE ID: CVE-2025-4481 State: PUBLISHED Published: 2025-05-09T16:31:07.305Z Last Updated: 2025-05-09T19:52:29.269Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Apartment Visitor Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /search-result.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308195 - https://vuldb.com/?ctiid.308195 - https://vuldb.com/?submit.566671 - https://github.com/hackerzhuo/CVE/issues/1 - https://www.sourcecodester.com/
CVE ID: CVE-2025-4482 State: PUBLISHED Published: 2025-05-09T17:31:04.563Z Last Updated: 2025-05-09T19:25:59.841Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Project Worlds Products: Student Project Allocation System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in Project Worlds Student Project Allocation System 1.0. Affected by this vulnerability is an unknown functionality of the file /change_pass/forgot_password_sql.php. The manipulation of the argument Pat_BloodGroup1 leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected a
be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308197 - https://vuldb.com/?ctiid.308197 - https://vuldb.com/?submit.566719 - https://github.com/hhhanxx/attack/issues/3