Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ed attackers to upload arbitrary files on the affected site's server which may make remote code execution possible via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/145deebd-1e15-4f8a-878c-9424c2cd9601?source=cve - https://themeforest.net/item/zegen-church-wordpress-theme/25116823
CVE ID: CVE-2025-11088 State: PUBLISHED Published: 2025-09-27T23:32:06.326Z Last Updated: 2025-09-29T14:51:53.037Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Open Source Job Portal Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in itsourcecode Open Source Job Portal 1.0. Impacted is an unknown function of the file /admin/vacancy/index.php?view=edit. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326156 - https://vuldb.com/?ctiid.326156 - https://vuldb.com/?submit.659763 - https://github.com/yihaofuweng/cve/issues/35 - https://itsourcecode.com/
CVE ID: CVE-2025-11089 State: PUBLISHED Published: 2025-09-28T00:02:05.116Z Last Updated: 2025-09-29T14:51:13.856Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: kidaze Products: CourseSelectionSystem Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This impacts an unknown function of the file /Profilers/PriProfile/COUNT3s4.php. Executing manipulation of the argument cbranch can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. This product takes the approach of rolling releases
motely. The exploit has been publicly disclosed and may be utilized. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326171 - https://vuldb.com/?ctiid.326171 - https://vuldb.com/?submit.661282 - https://github.com/evilthan9/cve/issues/2
CVE ID: CVE-2025-11090 State: PUBLISHED Published: 2025-09-28T01:02:06.772Z Last Updated: 2025-09-29T14:49:54.695Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Open Source Job Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected is an unknown function of the file /admin/employee/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326172 - https://vuldb.
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326172 - https://vuldb.com/?ctiid.326172 - https://vuldb.com/?submit.661761 - https://vuldb.com/?submit.662325 - https://github.com/friendddy/cve/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-11091 State: PUBLISHED Published: 2025-09-28T01:32:10.696Z Last Updated: 2025-09-29T14:48:57.508Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC21 Problem Types: CWE-120, CWE-119 Description: A security flaw has been discovered in Tenda AC21 up to 16.03.08.16. Affected by this vulnerability is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326173 - https://vuldb.c
ploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326173 - https://vuldb.com/?ctiid.326173 - https://vuldb.com/?submit.661806 - https://github.com/maximdevere/CVE2/issues/2 - https://www.tenda.com.cn/
CVE ID: CVE-2025-11092 State: PUBLISHED Published: 2025-09-28T02:02:06.125Z Last Updated: 2025-09-29T14:48:12.741Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-823X Problem Types: CWE-77, CWE-74 Description: A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub_412E7C of the file /goform/set_switch_settings. This manipulation of the argument port causes command injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326174 - https://vuldb.c
ploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326174 - https://vuldb.com/?ctiid.326174 - https://vuldb.com/?submit.661809 - https://github.com/maximdevere/CVE2/issues/4 - https://www.dlink.com/
CVE ID: CVE-2025-11093 State: PUBLISHED Published: 2025-11-05T18:31:17.873Z Last Updated: 2025-11-05T19:39:15.696Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: WSO2 Products: WSO2 Micro Integrator, WSO2 API Manager, WSO2 Enterprise Integrator, WSO2 Universal Gateway, WSO2 API Control Plane, WSO2 Traffic Manager, WSO2 Open Banking IAM, WSO2 Open Banking AM, WSO2 Identity Server as Key Manager, org.apache.synapse:synapse-core, org.apache.synapse:synapse-extensions Problem Types: CWE-94 Description: An arbitrary code execution vulnerability exists in multiple WSO2 products due to insufficient restrictions in the GraalJS and NashornJS Script Mediator engines. A
xists in multiple WSO2 products due to insufficient restrictions in the GraalJS and NashornJS Script Mediator engines. Authenticated users with elevated privileges can execute arbitrary code within the integration runtime environment. By default, access to these scripting engines is limited to administrators in WSO2 Micro Integrator and WSO2 Enterprise Integrator, while in WSO2 API Manager, access extends to both administrators and API creators. This may allow trusted-but-privileged users to perform unauthorized actions or compromise the execution environment. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.docs.wso2.com/en/latest/security-announcements/secu
alyst Notes: - CISA ADP Vulnrichment: References: - https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-4510/
CVE ID: CVE-2025-11094 State: PUBLISHED Published: 2025-09-28T03:32:06.529Z Last Updated: 2025-09-29T19:38:07.136Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: E-Commerce Website Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/admin_product_details.php. Such manipulation of the argument prod_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326175 - https
y and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326175 - https://vuldb.com/?ctiid.326175 - https://vuldb.com/?submit.659820 - https://github.com/wolfsecurity2/CVE/tree/main/tmp34 - https://code-projects.org/
CVE ID: CVE-2025-11095 State: PUBLISHED Published: 2025-09-28T04:02:06.167Z Last Updated: 2025-09-29T13:17:51.442Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-823X Problem Types: CWE-77, CWE-74 Description: A vulnerability was detected in D-Link DIR-823X 250416. This vulnerability affects unknown code of the file /goform/delete_offline_device. Performing manipulation of the argument delvalue results in command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326176 - https://vuldb.com/?ctiid.326176 -
l Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326176 - https://vuldb.com/?ctiid.326176 - https://vuldb.com/?submit.661911 - https://github.com/n1ptune/dink/blob/main/delete_offline_device.md - https://www.dlink.com/
CVE ID: CVE-2025-11096 State: PUBLISHED Published: 2025-09-28T04:32:05.904Z Last Updated: 2025-09-29T13:17:07.374Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-823X Problem Types: CWE-77, CWE-74 Description: A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diag_traceroute. Executing manipulation of the argument target_addr can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326177 - https://vuldb.com/?ctiid.326177 - https://vul
tes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326177 - https://vuldb.com/?ctiid.326177 - https://vuldb.com/?submit.661912 - https://github.com/n1ptune/dink/blob/main/diag_traceroute.md - https://www.dlink.com/
CVE ID: CVE-2025-11097 State: PUBLISHED Published: 2025-09-28T05:02:06.874Z Last Updated: 2025-09-29T15:28:50.570Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-823X Problem Types: CWE-77, CWE-74 Description: A vulnerability has been found in D-Link DIR-823X 250416. Impacted is an unknown function of the file /goform/set_device_name. The manipulation of the argument mac leads to command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326178 - https://vuldb.com/?ctiid.326178 - ht
nalyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326178 - https://vuldb.com/?ctiid.326178 - https://vuldb.com/?submit.661913 - https://github.com/n1ptune/dink/blob/main/set_device_name.md - https://www.dlink.com/
CVE ID: CVE-2025-11098 State: PUBLISHED Published: 2025-09-28T05:32:05.565Z Last Updated: 2025-09-29T19:38:41.115Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-823X Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in D-Link DIR-823X 250416. The affected element is an unknown function of the file /goform/set_wifi_blacklists. The manipulation of the argument macList results in command injection. The attack may be performed from remote. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326179 - https://vuldb.com/?ctiid.326179 - https
yst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326179 - https://vuldb.com/?ctiid.326179 - https://vuldb.com/?submit.661915 - https://github.com/n1ptune/dink/blob/main/set_wifi_blacklists.md - https://www.dlink.com/
CVE ID: CVE-2025-11099 State: PUBLISHED Published: 2025-09-28T06:02:06.827Z Last Updated: 2025-09-29T19:39:38.987Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-823X Problem Types: CWE-77, CWE-74 Description: A vulnerability was determined in D-Link DIR-823X 250416. The impacted element is the function uci_del of the file /goform/delete_prohibiting. This manipulation of the argument delvalue causes command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326180 - https://vuldb.com/?c
ed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326180 - https://vuldb.com/?ctiid.326180 - https://vuldb.com/?submit.661916 - https://github.com/n1ptune/dink/blob/main/uci_del_in_delete_prohibiting.md - https://www.dlink.com/
CVE ID: CVE-2025-11100 State: PUBLISHED Published: 2025-09-28T06:32:06.011Z Last Updated: 2025-09-29T19:40:39.233Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-823X Problem Types: CWE-77, CWE-74 Description: A vulnerability was identified in D-Link DIR-823X 250416. This affects the function uci_set of the file /goform/set_wifi_blacklists. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326181 - https://vuldb.com/?ctiid.326181 - https://vuldb.com/?submit.661
lnrichment: References: - https://vuldb.com/?id.326181 - https://vuldb.com/?ctiid.326181 - https://vuldb.com/?submit.661917 - https://github.com/n1ptune/dink/blob/main/uci_set.md - https://www.dlink.com/
CVE ID: CVE-2025-11101 State: PUBLISHED Published: 2025-09-28T07:02:05.579Z Last Updated: 2025-09-29T19:41:10.083Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Open Source Job Portal Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in itsourcecode Open Source Job Portal 1.0. This impacts an unknown function of the file /jobportal/admin/company/index.php?view=edit. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
n released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326182 - https://vuldb.com/?ctiid.326182 - https://vuldb.com/?submit.662326 - https://github.com/yihaofuweng/cve/issues/37 - https://itsourcecode.com/
CVE ID: CVE-2025-11102 State: PUBLISHED Published: 2025-09-28T07:32:07.689Z Last Updated: 2025-09-29T19:41:40.145Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Learning Management System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/edit_content.php. Executing manipulation of the argument Title can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
ailable to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326183 - https://vuldb.com/?ctiid.326183 - https://vuldb.com/?submit.662352 - https://github.com/hbesljx/vul/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-11103 State: PUBLISHED Published: 2025-09-28T11:02:06.109Z Last Updated: 2025-09-29T14:10:12.531Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Projectworlds Products: Online Tours and Travels Problem Types: CWE-434, CWE-284 Description: A security vulnerability has been detected in Projectworlds Online Tours and Travels 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/change-image.php. The manipulation of the argument packageimage leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
motely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326184 - https://vuldb.com/?ctiid.326184 - https://vuldb.com/?submit.662395 - https://github.com/Landjun/CVE/issues/1
CVE ID: CVE-2025-11104 State: PUBLISHED Published: 2025-09-28T12:32:06.000Z Last Updated: 2025-09-29T14:04:41.121Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: CodeAstro Products: Electricity Billing System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in CodeAstro Electricity Billing System 1.0. Affected by this issue is some unknown functionality of the file /admin/bill.php. The manipulation of the argument uid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326185 - https://vuldb.com/?ct
d. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326185 - https://vuldb.com/?ctiid.326185 - https://vuldb.com/?submit.662441 - https://github.com/WANGshuyan2025/cve/issues/1 - https://codeastro.com/
CVE ID: CVE-2025-11105 State: PUBLISHED Published: 2025-09-28T13:02:06.652Z Last Updated: 2025-09-29T14:03:42.500Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Scheduling System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /schedulingsystem/addsubject.php. This manipulation of the argument subcode causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326186 - https://vuldb.c
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326186 - https://vuldb.com/?ctiid.326186 - https://vuldb.com/?submit.662442 - https://github.com/WANGshuyan2025/cve/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-11106 State: PUBLISHED Published: 2025-09-28T14:02:05.886Z Last Updated: 2025-09-29T12:11:07.744Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Scheduling System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Simple Scheduling System 1.0. This vulnerability affects unknown code of the file /schedulingsystem/addfaculty.php. Such manipulation of the argument falname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
sed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326187 - https://vuldb.com/?ctiid.326187 - https://vuldb.com/?submit.662443 - https://github.com/WANGshuyan2025/cve/issues/3 - https://code-projects.org/
CVE ID: CVE-2025-11107 State: PUBLISHED Published: 2025-09-28T14:32:06.045Z Last Updated: 2025-09-29T14:47:34.034Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Scheduling System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Simple Scheduling System 1.0. This issue affects some unknown processing of the file /schedulingsystem/addcourse.php. Performing manipulation of the argument corcode results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
oit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326188 - https://vuldb.com/?ctiid.326188 - https://vuldb.com/?submit.662444 - https://github.com/WANGshuyan2025/cve/issues/4 - https://code-projects.org/
CVE ID: CVE-2025-11108 State: PUBLISHED Published: 2025-09-28T15:02:05.462Z Last Updated: 2025-09-29T13:52:07.714Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Scheduling System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in code-projects Simple Scheduling System 1.0. Impacted is an unknown function of the file /schedulingsystem/addroom.php. Executing manipulation of the argument room can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3
disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326189 - https://vuldb.com/?ctiid.326189 - https://vuldb.com/?submit.662445 - https://github.com/WANGshuyan2025/cve/issues/5 - https://code-projects.org/
CVE ID: CVE-2025-11109 State: PUBLISHED Published: 2025-09-28T15:32:07.313Z Last Updated: 2025-09-29T13:50:30.892Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Computer Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/us_edit.php?action=edit. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
ploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326190 - https://vuldb.com/?ctiid.326190 - https://vuldb.com/?submit.662455 - https://github.com/DrNbnonono/CVE/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-11110 State: PUBLISHED Published: 2025-09-28T16:02:06.684Z Last Updated: 2025-09-29T13:49:35.945Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Learning Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in Campcodes Online Learning Management System 1.0. The impacted element is an unknown function of the file /admin/school_year.php. The manipulation of the argument school_year results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326191 - https://vuldb.com/?ctiid.326191 - https://vuldb.com/?submit.662467 - https://github.com/JKyukino/cve/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-11111 State: PUBLISHED Published: 2025-09-28T16:32:05.924Z Last Updated: 2025-09-29T13:48:52.111Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Advanced Online Voting Management System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in Campcodes Advanced Online Voting Management System 1.0. This affects an unknown function of the file /admin/candidates_edit.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
ade available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.326192 - https://vuldb.com/?ctiid.326192 - https://vuldb.com/?submit.662468 - https://github.com/Clw309/CVE/issues/1 - https://www.campcodes.com/