Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-8251 State: PUBLISHED Published: 2025-07-28T01:32:05.426Z Last Updated: 2025-07-28T17:18:43.684Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Exam Form Submission Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/delete_s4.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317839 - https://vuldb.com/?ctiid.317839 - https://vuldb.com/?submit.622550 - https://github.com/mynlxx/CVE-ZhuChengQing/issues/8 - https://code-projects.org/
CVE ID: CVE-2025-8252 State: PUBLISHED Published: 2025-07-28T02:02:05.594Z Last Updated: 2025-07-28T17:18:14.216Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Exam Form Submission Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/delete_s5.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317840 - https://vuldb.com/?ctiid.317840 - https://vuldb.com/?submit.622549 - https://github.com/mynlxx/CVE-ZhuChengQing/issues/9 - https://code-projects.org/
CVE ID: CVE-2025-8253 State: PUBLISHED Published: 2025-07-28T02:32:05.692Z Last Updated: 2025-07-28T16:29:12.859Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Exam Form Submission Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Exam Form Submission 1.0. It has been classified as critical. This affects an unknown part of the file /admin/delete_s6.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
sclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317841 - https://vuldb.com/?ctiid.317841 - https://vuldb.com/?submit.622548 - https://github.com/mynlxx/CVE-ZhuChengQing/issues/10 - https://code-projects.org/
CVE ID: CVE-2025-8254 State: PUBLISHED Published: 2025-07-28T03:02:05.384Z Last Updated: 2025-07-28T16:18:00.341Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Courier Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Courier Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /view_parcel.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
osed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317842 - https://vuldb.com/?ctiid.317842 - https://vuldb.com/?submit.623425 - https://github.com/XiaoJiesecqwq/CVE/issues/15 - https://www.campcodes.com/
CVE ID: CVE-2025-8255 State: PUBLISHED Published: 2025-07-28T03:32:06.230Z Last Updated: 2025-07-28T16:11:22.323Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Exam Form Submission Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in code-projects Exam Form Submission 1.0. It has been rated as critical. This issue affects some unknown processing of the file /register.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317843 - https://vuldb.com/?ctiid.317843 - https://vuldb.com/?submit.623444 - https://github.com/Dingzenggonpo/cve/issues/4 - https://code-projects.org/
CVE ID: CVE-2025-8256 State: PUBLISHED Published: 2025-07-28T04:02:04.909Z Last Updated: 2025-07-28T16:07:15.035Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Ordering System Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical has been found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/product.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
een disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317844 - https://vuldb.com/?ctiid.317844 - https://vuldb.com/?submit.623446 - https://github.com/zzb1388/cve/issues/28 - https://code-projects.org/
CVE ID: CVE-2025-8257 State: PUBLISHED Published: 2025-07-28T04:32:05.048Z Last Updated: 2025-07-28T16:02:40.557Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: Lobby Universe Products: Lobby App Problem Types: CWE-926 Description: A vulnerability classified as problematic was found in Lobby Universe Lobby App up to 2.8.0 on Android. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.maverick.lobby. The manipulation leads to improper export of android application components. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Addit
mponents. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317845 - https://vuldb.com/?ctiid.317845 - https://vuldb.com/?submit.623471 - https://github.com/KMov-g/androidapps/blob/main/com.maverick.lobby.md
CVE ID: CVE-2025-8258 State: PUBLISHED Published: 2025-07-28T05:02:10.197Z Last Updated: 2025-07-28T16:01:00.434Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: Cool Mo Products: Maigcal Number App Problem Types: CWE-926 Description: A vulnerability, which was classified as problematic, has been found in Cool Mo Maigcal Number App up to 1.0.3 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.sdmagic.number. The manipulation leads to improper export of android application components. An attack has to be approached locally. The exploit has been disclosed to the public and may be
application components. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317846 - https://vuldb.com/?ctiid.317846 - https://vuldb.com/?submit.623472 - https://github.com/KMov-g/androidapps/blob/main/com.sdmagic.number.md
CVE ID: CVE-2025-8259 State: PUBLISHED Published: 2025-07-28T05:32:04.923Z Last Updated: 2025-07-28T15:58:57.158Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: n/a Products: Vaelsys Problem Types: CWE-78, CWE-77 Description: A vulnerability, which was classified as critical, was found in Vaelsys 4.1.0. This affects the function execute_DataObjectProc of the file /grid/vgrid_server.php. The manipulation of the argument xajaxargs leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additiona
e public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317847 - https://vuldb.com/?ctiid.317847 - https://vuldb.com/?submit.616920 - https://github.com/waiwai24/0101/blob/main/CVEs/Vaelsys/Remote_Code_Execution_in_Vaelsys_V4_Platform.md
CVE ID: CVE-2025-8260 State: PUBLISHED Published: 2025-07-28T06:02:05.309Z Last Updated: 2025-07-28T15:58:03.186Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: n/a Products: Vaelsys Problem Types: CWE-328, CWE-327 Description: A vulnerability has been found in Vaelsys 4.1.0 and classified as problematic. This vulnerability affects unknown code of the file /grid/vgrid_server.php of the component MD4 Hash Handler. The manipulation of the argument xajaxargs leads to use of weak hash. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the publi
exity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317848 - https://vuldb.com/?ctiid.317848 - https://vuldb.com/?submit.616922 - https://github.com/waiwai24/0101/blob/main/CVEs/Vaelsys/Unauthorized_Access_Leads_to_Sensitive_Information_Leakage_in_Vaelsys_V4_Platform.md
CVE ID: CVE-2025-8261 State: PUBLISHED Published: 2025-07-28T06:32:05.645Z Last Updated: 2025-07-28T15:53:54.833Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: n/a Products: Vaelsys Problem Types: CWE-285, CWE-266 Description: A vulnerability was found in Vaelsys 4.1.0 and classified as critical. This issue affects some unknown processing of the file /grid/vgrid_server.php of the component User Creation Handler. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analy
c and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317849 - https://vuldb.com/?ctiid.317849 - https://vuldb.com/?submit.616924 - https://github.com/waiwai24/0101/blob/main/CVEs/Vaelsys/Unauthorized_User_Creation_Vulnerability_Exists_in_Vaelsys_V4_Platform.md
CVE ID: CVE-2025-8262 State: PUBLISHED Published: 2025-07-28T07:02:05.616Z Last Updated: 2025-07-28T17:16:45.501Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C) Vendors: yarnpkg Products: Yarn Problem Types: CWE-1333, CWE-400 Description: A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch the attack remotely. The patch is identified as 97731871e674bf93bcbf29e9d3258da8685f3076. It is recommended to apply a patc
attack remotely. The patch is identified as 97731871e674bf93bcbf29e9d3258da8685f3076. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317850 - https://vuldb.com/?ctiid.317850 - https://vuldb.com/?submit.617393 - https://github.com/yarnpkg/yarn/pull/9199 - https://github.com/yarnpkg/yarn/pull/9199/commits/97731871e674bf93bcbf29e9d3258da8685f3076
CVE ID: CVE-2025-8263 State: REJECTED Published: 2025-07-28T07:32:05.605Z Last Updated: 2025-08-02T08:42:19.309Z Description: No description available.
CVE ID: CVE-2025-8264 State: PUBLISHED Published: 2025-07-29T05:00:00.756Z Last Updated: 2025-07-29T13:57:06.332Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P) Vendors: n/a Products: z-push/z-push-dev Problem Types: CWE-89 Description: Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inject malicious commands by manipulating the username field in basic authentication. This allows the attacker to access and potentially modify or delete sensitive data from a linked third-party database. **Note:** This vulnerability affects Z-Push installations that utilize th
itive data from a linked third-party database. **Note:** This vulnerability affects Z-Push installations that utilize the IMAP backend and have the IMAP_FROM_SQL_QUERY option configured. Mitigation Change configuration to use the default or LDAP in backend/imap/config.php php define('IMAP_DEFAULTFROM', ''); or php define('IMAP_DEFAULTFROM', 'ldap'); Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-PHP-ZPUSHZPUSHDEV-10908180 - https://xbow.com/blog/xbow-zpush-sqli/ - https://github.com/Z-Hub/Z-Push/pull/161/commits/f981d515a35ac4c303959af21dce880a5db02786 - https://github.com/Z-Hub/Z-Push/pull/161 - https://github.com/Z-Hub/Z-Push/blob/af25a2
35ac4c303959af21dce880a5db02786 - https://github.com/Z-Hub/Z-Push/pull/161 - https://github.com/Z-Hub/Z-Push/blob/af25a2169a50d6e05a5916d1e8b2b6cd17011c98/src/backend/imap/user_identity.php%23L211C9-L214C25
CVE ID: CVE-2025-8265 State: PUBLISHED Published: 2025-07-28T08:02:05.608Z Last Updated: 2025-07-28T17:02:41.864Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: 299Ko Products: CMS Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical has been found in 299Ko CMS 2.0.0. This affects an unknown part of the file /admin/filemanager/view of the component File Management. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: -
e used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317853 - https://vuldb.com/?ctiid.317853 - https://vuldb.com/?submit.617651 - https://github.com/loopholesgenius/cve/blob/main/There%20is%20a%20file%20management%20section%20in%20the%20background%20management%20(1).pdf
CVE ID: CVE-2025-8266 State: PUBLISHED Published: 2025-07-28T08:32:15.139Z Last Updated: 2025-07-28T16:59:30.165Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C) Vendors: yanyutao0402 Products: ChanCMS Problem Types: CWE-502, CWE-20 Description: A vulnerability has been found in yanyutao0402 ChanCMS up to 3.1.2 and classified as critical. Affected by this vulnerability is the function getArticle of the file app/modules/cms/controller/collect.js. The manipulation of the argument targetUrl leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.1.3 is able to address this issue. It
exploit has been disclosed to the public and may be used. Upgrading to version 3.1.3 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317857 - https://vuldb.com/?ctiid.317857 - https://vuldb.com/?submit.622170 - https://gitee.com/yanyutao0402/ChanCMS/issues/ICLP61 - https://gitee.com/yanyutao0402/ChanCMS/releases/tag/V3.1.3
CVE ID: CVE-2025-8267 State: PUBLISHED Published: 2025-07-28T05:00:00.992Z Last Updated: 2025-07-28T16:01:35.358Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N/E:P) Vendors: n/a Products: ssrfcheck Problem Types: CWE-918 Description: Versions of the package ssrfcheck before 1.2.0 are vulnerable to Server-Side Request Forgery (SSRF) due to an incomplete denylist of IP address ranges. Specifically, the package fails to classify the reserved IP address space 224.0.0.0/4 (Multicast) as invalid. This oversight allows attackers to craft requests targeting these multicast addresses. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vul
these multicast addresses. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-SSRFCHECK-9510756 - https://gist.github.com/lirantal/2976840639df824cb3abe60d13c65e04 - https://github.com/felippe-regazio/ssrfcheck/issues/5 - https://github.com/felippe-regazio/ssrfcheck/commit/9507b49fd764f2a1a1d1e3b9ee577b7545e6950e
CVE ID: CVE-2025-8268 State: PUBLISHED Published: 2025-09-03T20:24:15.668Z Last Updated: 2025-09-03T20:47:15.585Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: tigroumeow Products: AI Engine Problem Types: CWE-862 Description: The AI Engine plugin for WordPress is vulnerable to unauthorized access and loss of data due to a missing capability check on the rest_list and delete_files functions in all versions up to, and including, 2.9.5. This makes it possible for unauthenticated attackers to list and delete files uploaded by other users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/be39e24f-d7d7-44db-9ffd-a4605de8e577?source=cve - https://plugins.trac.wordpress.org/browser/ai-engine/tags/2.9.5/classes/modules/files.php#L645 - https://plugins.trac.wordpress.org/browser/ai-engine/tags/2.9.5/classes/modules/files.php#L518 - https://plugins.trac.wordpress.org/browser/ai-engine/tags/2.9.5/classes/modules/files.php#L664
CVE ID: CVE-2025-8269 State: PUBLISHED Published: 2025-07-28T09:02:15.193Z Last Updated: 2025-07-28T15:33:00.219Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Exam Form Submission Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/delete_s1.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317858 - https://vuldb.com/?ctiid.317858 - https://vuldb.com/?submit.622553 - https://github.com/mynlxx/CVE-ZhuChengQing/issues/5 - https://code-projects.org/
CVE ID: CVE-2025-8270 State: PUBLISHED Published: 2025-07-28T09:32:06.184Z Last Updated: 2025-07-28T15:29:46.349Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Exam Form Submission Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Exam Form Submission 1.0. It has been classified as critical. This affects an unknown part of the file /admin/delete_s2.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
sclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317859 - https://vuldb.com/?ctiid.317859 - https://vuldb.com/?submit.622552 - https://github.com/mynlxx/CVE-ZhuChengQing/issues/6 - https://code-projects.org/
CVE ID: CVE-2025-8271 State: PUBLISHED Published: 2025-07-28T10:02:05.388Z Last Updated: 2025-07-28T15:28:32.896Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Exam Form Submission Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Exam Form Submission 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/delete_s3.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
closed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317860 - https://vuldb.com/?ctiid.317860 - https://vuldb.com/?submit.622551 - https://github.com/mynlxx/CVE-ZhuChengQing/issues/7 - https://code-projects.org/
CVE ID: CVE-2025-8272 State: PUBLISHED Published: 2025-07-28T10:32:05.691Z Last Updated: 2025-07-28T14:50:41.728Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Exam Form Submission Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Exam Form Submission 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/update_fst.php. The manipulation of the argument credits leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
en disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317861 - https://vuldb.com/?ctiid.317861 - https://vuldb.com/?submit.622554 - https://github.com/mynlxx/CVE-ZhuChengQing/issues/4 - https://code-projects.org/
CVE ID: CVE-2025-8273 State: PUBLISHED Published: 2025-07-28T11:02:05.676Z Last Updated: 2025-07-28T14:36:13.375Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Exam Form Submission Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/update_s8.php. The manipulation of the argument credits leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
losed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317862 - https://vuldb.com/?ctiid.317862 - https://vuldb.com/?submit.622555 - https://github.com/mynlxx/CVE-ZhuChengQing/issues/3 - https://code-projects.org/
CVE ID: CVE-2025-8274 State: PUBLISHED Published: 2025-07-28T11:32:06.220Z Last Updated: 2025-07-28T14:31:37.296Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Recruitment Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=save_recruitment_status. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: