Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-13246 State: PUBLISHED Published: 2025-11-16T10:02:05.658Z Last Updated: 2025-11-17T19:12:55.781Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: shsuishang Products: ShopSuite ModulithShop Problem Types: CWE-22 Description: A vulnerability was identified in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Impacted is the function JwtAuthenticationFilter of the file src/main/java/com/suisung/shopsuite/common/security/JwtAuthenticationFilter.java. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. This product is using a r
possible to initiate the attack remotely. The exploit is publicly available and might be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332580 - https://vuldb.com/?ctiid.332580 - https://vuldb.com/?submit.687532 - https://github.com/shsuishang/modulithshop/issues/1
CVE ID: CVE-2025-13247 State: PUBLISHED Published: 2025-11-16T10:32:07.025Z Last Updated: 2025-11-17T19:10:08.929Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Tourism Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in PHPGurukul Tourism Management System 1.0. The affected element is an unknown function of the file /admin/user-bookings.php. The manipulation of the argument uid results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
eased to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332581 - https://vuldb.com/?ctiid.332581 - https://vuldb.com/?submit.687578 - https://github.com/L-Bitter/CVE/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-13248 State: PUBLISHED Published: 2025-11-16T11:02:06.412Z Last Updated: 2025-11-17T19:08:48.358Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Patients Waiting Area Queue Management System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /php/api_patient_schedule.php. This manipulation of the argument appointmentID causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Note
be initiated remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332582 - https://vuldb.com/?ctiid.332582 - https://vuldb.com/?submit.687580 - https://github.com/2H-K/mycve/issues/2 - https://www.sourcecodester.com/
CVE ID: CVE-2025-13249 State: PUBLISHED Published: 2025-11-16T11:32:05.743Z Last Updated: 2025-11-17T19:00:38.836Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Jiusi Products: OA Problem Types: CWE-434, CWE-284 Description: A security vulnerability has been detected in Jiusi OA up to 20251102. This affects an unknown function of the file /OfficeServer?isAjaxDownloadTemplate=false of the component OfficeServer Interface. Such manipulation of the argument FileData leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332583 - https://vuldb.com/?ctiid.332583 - https://vuldb.com/?submit.687599 - https://github.com/rooboot501/my-project/blob/main/jiousi.md
CVE ID: CVE-2025-13250 State: PUBLISHED Published: 2025-11-16T12:02:05.565Z Last Updated: 2025-11-17T18:58:18.328Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: WeiYe-Jing Products: datax-web Problem Types: CWE-284, CWE-266 Description: A vulnerability was detected in WeiYe-Jing datax-web up to 2.1.2. This impacts the function remove/update/pause/start/triggerJob of the component Job Handler. Performing manipulation results in improper access controls. The attack may be initiated remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332584 - https://vuldb.com/?ctiid.332584 -
l Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332584 - https://vuldb.com/?ctiid.332584 - https://vuldb.com/?submit.687604 - https://github.com/Xzzz111/exps/blob/main/archives/datax-web-broken-access-control-1/report.md
CVE ID: CVE-2025-13251 State: PUBLISHED Published: 2025-11-16T13:02:05.803Z Last Updated: 2025-11-17T18:43:46.951Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: WeiYe-Jing Products: datax-web Problem Types: CWE-89, CWE-74 Description: A flaw has been found in WeiYe-Jing datax-web up to 2.1.2. Affected is an unknown function. Executing manipulation can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332585 - https://vuldb.com/?ctiid.332585 - https://vuldb.com/?submit.687606 - https://github.com/Xzzz111/exps/blob/mai
d.332585 - https://vuldb.com/?ctiid.332585 - https://vuldb.com/?submit.687606 - https://github.com/Xzzz111/exps/blob/main/archives/datax-web-sql-injection-1/report.md
CVE ID: CVE-2025-13252 State: PUBLISHED Published: 2025-11-16T23:02:05.790Z Last Updated: 2025-11-17T18:41:06.687Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: shsuishang Products: ShopSuite ModulithShop Problem Types: CWE-798, CWE-259 Description: A vulnerability was found in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Affected by this issue is some unknown functionality of the component RSA/OAuth2/Database. The manipulation results in hard-coded credentials. The attack can be executed remotely. The exploit has been made public and could be used. This product implements a rolling release for ongoing delivery, which mean
ploit has been made public and could be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332587 - https://vuldb.com/?ctiid.332587 - https://vuldb.com/?submit.687685 - https://github.com/shsuishang/modulithshop/issues/2 - https://github.com/shsuishang/modulithshop/issues/2#issue-3580272472
CVE ID: CVE-2025-13253 State: PUBLISHED Published: 2025-11-16T23:32:05.637Z Last Updated: 2025-11-17T18:51:50.947Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: projectworlds Products: Advanced Library Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /add_librarian.php. This manipulation of the argument Username causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
n publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332588 - https://vuldb.com/?ctiid.332588 - https://vuldb.com/?submit.687853 - https://vuldb.com/?submit.688779 - https://github.com/Wyg2002yx/cve/blob/main/001/report.md
CVE ID: CVE-2025-13254 State: PUBLISHED Published: 2025-11-17T00:02:07.060Z Last Updated: 2025-11-17T18:40:00.235Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: projectworlds Products: Advanced Library Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in projectworlds Advanced Library Management System 1.0. This vulnerability affects unknown code of the file /add_member.php. Such manipulation of the argument roll_number leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
ublicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332589 - https://vuldb.com/?ctiid.332589 - https://vuldb.com/?submit.687854 - https://github.com/Wyg2002yx/cve/blob/main/002/report.md
CVE ID: CVE-2025-13255 State: PUBLISHED Published: 2025-11-17T00:32:06.284Z Last Updated: 2025-11-17T18:37:53.164Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: projectworlds Products: Advanced Library Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. This issue affects some unknown processing of the file /book_search.php. Performing manipulation of the argument book_pub/book_title results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP V
ttack remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332590 - https://vuldb.com/?ctiid.332590 - https://vuldb.com/?submit.687855 - https://vuldb.com/?submit.687857 - https://github.com/Wyg2002yx/cve/blob/main/003/report.md - https://github.com/Wyg2002yx/cve/blob/main/004/report.md
CVE ID: CVE-2025-13256 State: PUBLISHED Published: 2025-11-17T01:02:06.346Z Last Updated: 2025-11-17T18:31:39.756Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: projectworlds Products: Advanced Library Management System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrow.php. Executing manipulation of the argument roll_number can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References
been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332591 - https://vuldb.com/?ctiid.332591 - https://vuldb.com/?submit.687856 - https://github.com/Wyg2002yx/cve/blob/main/005/report.md
CVE ID: CVE-2025-13257 State: PUBLISHED Published: 2025-11-17T01:32:06.953Z Last Updated: 2025-11-17T18:25:07.056Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Inventory Management System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
as been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332592 - https://vuldb.com/?ctiid.332592 - https://vuldb.com/?submit.687863 - https://github.com/iamzzzzz/iam/issues/3 - https://itsourcecode.com/
CVE ID: CVE-2025-13258 State: PUBLISHED Published: 2025-11-17T02:02:08.487Z Last Updated: 2025-11-17T18:47:00.562Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC20 Problem Types: CWE-120, CWE-119 Description: A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is an unknown function of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto results in buffer overflow. The attack can be launched remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332593 - https://vuldb.com/?ctiid.332593 - https://vuldb.com
CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332593 - https://vuldb.com/?ctiid.332593 - https://vuldb.com/?submit.688716 - https://github.com/DavCloudz/cve/blob/main/Tenda/Tengda%20AC20%20Router%20WifiExtraSet%20Buffer%20Overflow%20Vulnerability.md - https://github.com/DavCloudz/cve/blob/main/Tenda/Tengda%20AC20%20Router%20WifiExtraSet%20Buffer%20Overflow%20Vulnerability.md#poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-13259 State: PUBLISHED Published: 2025-11-17T02:32:06.442Z Last Updated: 2025-11-17T17:05:08.713Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Supplier Management System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /manufacturer/edit_unit.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332594 - https://vuldb.com/?ctiid.332594 -
Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332594 - https://vuldb.com/?ctiid.332594 - https://vuldb.com/?submit.688780 - https://github.com/arpcyber060/CVE/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-13260 State: PUBLISHED Published: 2025-11-17T03:02:06.678Z Last Updated: 2025-11-17T17:02:05.268Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Supplier Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /manufacturer/edit_product.php. Such manipulation of the argument cmbProductUnit leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3325
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332595 - https://vuldb.com/?ctiid.332595 - https://vuldb.com/?submit.689268 - https://github.com/arpcyber070/CVE/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-13261 State: PUBLISHED Published: 2025-11-17T03:32:05.193Z Last Updated: 2025-11-17T18:17:54.537Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: lsfusion Products: platform Problem Types: CWE-22 Description: A vulnerability was found in lsfusion platform up to 6.1. Affected is the function DownloadFileRequestHandler of the file web-client/src/main/java/lsfusion/http/controller/file/DownloadFileRequestHandler.java. Performing manipulation of the argument Version results in path traversal. Remote exploitation of the attack is possible. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnr
f the attack is possible. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332596 - https://vuldb.com/?ctiid.332596 - https://vuldb.com/?submit.689412 - https://github.com/lsfusion/platform/issues/1543 - https://github.com/lsfusion/platform/issues/1543#issue-3576922131
CVE ID: CVE-2025-13262 State: PUBLISHED Published: 2025-11-17T04:02:05.028Z Last Updated: 2025-11-17T17:46:41.702Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: lsfusion Products: platform Problem Types: CWE-22 Description: A vulnerability was determined in lsfusion platform up to 6.1. Affected by this vulnerability is the function UploadFileRequestHandler of the file platform/web-client/src/main/java/lsfusion/http/controller/file/UploadFileRequestHandler.java. Executing manipulation of the argument sid can lead to path traversal. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA
can be executed remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332597 - https://vuldb.com/?ctiid.332597 - https://vuldb.com/?submit.689414 - https://github.com/lsfusion/platform/issues/1544 - https://github.com/lsfusion/platform/issues/1544#issue-3589610731
CVE ID: CVE-2025-13263 State: PUBLISHED Published: 2025-11-17T04:32:06.660Z Last Updated: 2025-11-17T17:39:02.336Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Magazine Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in SourceCodester Online Magazine Management System 1.0. Affected by this issue is some unknown functionality of the file /categories.php. The manipulation of the argument c leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332598 - https://vuldb.com/?ctiid.332598 - https://vuldb.com/?submit.689416 - https://github.com/0xffaaa/cve/blob/main/Online%20Magazine%20Management%20System%20SQL%20blind%20injection(SQLI).md - https://www.sourcecodester.com/
CVE ID: CVE-2025-13264 State: PUBLISHED Published: 2025-11-17T05:02:05.676Z Last Updated: 2025-11-17T17:16:28.037Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Magazine Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in SourceCodester Online Magazine Management System 1.0. This affects an unknown part of the file /view_magazine.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
ed to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332599 - https://vuldb.com/?ctiid.332599 - https://vuldb.com/?submit.689424 - https://github.com/0xffaaa/cve/blob/main/Online%20Magazine%20Management%20System%20SQL%20blind%20injection2(SQLI)%20.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-13265 State: PUBLISHED Published: 2025-11-17T05:32:05.557Z Last Updated: 2025-11-17T16:58:09.861Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:ND/RC:UR) Vendors: lsfusion Products: platform Problem Types: CWE-22 Description: A weakness has been identified in lsfusion platform up to 6.1. This vulnerability affects the function unpackFile of the file server/src/main/java/lsfusion/server/physics/dev/integration/external/to/file/ZipUtils.java. This manipulation causes path traversal. It is possible to initiate the attack remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332600 - https://vuldb.com/?ctiid.332600 - https:
st Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332600 - https://vuldb.com/?ctiid.332600 - https://vuldb.com/?submit.689427 - https://github.com/lsfusion/platform/issues/1545
CVE ID: CVE-2025-13266 State: PUBLISHED Published: 2025-11-17T06:02:06.421Z Last Updated: 2025-11-17T16:29:30.390Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: wwwlike Products: vlife Problem Types: CWE-22 Description: A security vulnerability has been detected in wwwlike vlife up to 2.0.1. This issue affects the function create of the file vlife-base/src/main/java/cn/wwwlike/sys/api/SysFileApi.java of the component VLifeApi. Such manipulation of the argument fileName leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichmen
tack remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332601 - https://vuldb.com/?ctiid.332601 - https://vuldb.com/?submit.689436 - https://github.com/wwwlike/vlife/issues/3
CVE ID: CVE-2025-13267 State: PUBLISHED Published: 2025-11-17T06:32:05.839Z Last Updated: 2025-11-17T16:18:31.450Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Dental Clinic Appointment Reservation System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in SourceCodester Dental Clinic Appointment Reservation System 1.0. Impacted is an unknown function of the file /success.php. Performing manipulation of the argument username/password results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
ly. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332602 - https://vuldb.com/?ctiid.332602 - https://vuldb.com/?submit.689450 - https://github.com/0xffaaa/cve/blob/main/Dental_Clinic_Appointment_Reservation_System_Time-Based_SQL_Injection2.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-13268 State: PUBLISHED Published: 2025-11-17T07:02:08.083Z Last Updated: 2025-11-17T16:15:35.599Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Dromara Products: dataCompare Problem Types: CWE-74, CWE-707 Description: A flaw has been found in Dromara dataCompare up to 1.0.1. The affected element is the function DbConfig of the file src/main/java/com/vince/xq/project/system/dbconfig/service/DbconfigServiceImpl.java of the component JDBC URL Handler. Executing manipulation can lead to injection. The attack can be launched remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
tely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332603 - https://vuldb.com/?ctiid.332603 - https://vuldb.com/?submit.689460 - https://github.com/dromara/dataCompare/issues/13
CVE ID: CVE-2025-13269 State: PUBLISHED Published: 2025-11-17T07:32:06.275Z Last Updated: 2025-11-17T16:13:41.213Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: School Fees Payment Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Campcodes School Fees Payment Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=save_payment. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
as been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332604 - https://vuldb.com/?ctiid.332604 - https://vuldb.com/?submit.690034 - https://github.com/ASantsSec/CVE/issues/17 - https://www.campcodes.com/