Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-4698 State: PUBLISHED Published: 2025-05-15T14:00:08.398Z Last Updated: 2025-05-15T19:31:48.466Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Directory Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Directory Management System 2.0. This affects an unknown part of the file /admin/forget-password.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308
o the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308997 - https://vuldb.com/?ctiid.308997 - https://vuldb.com/?submit.567695 - https://github.com/lwecho/myCVE/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-4699 State: PUBLISHED Published: 2025-05-15T14:00:11.589Z Last Updated: 2025-05-15T19:31:33.498Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Apartment Visitors Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Apartment Visitors Management System 1.0. This vulnerability affects unknown code of the file /admin/visitors-form.php. The manipulation of the argument Category leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
een disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308998 - https://vuldb.com/?ctiid.308998 - https://vuldb.com/?submit.567738 - https://github.com/y77-88/myCVE/issues/10 - https://phpgurukul.com/
CVE ID: CVE-2025-4700 State: PUBLISHED Published: 2025-07-23T17:33:13.646Z Last Updated: 2025-07-25T03:55:22.419Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-79 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that, under specific circumstances, could have potentially allowed a successful attacker to trigger unintended content rendering leading to XSS. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/542915 - https://hackerone.com/reports/3120062
CVE ID: CVE-2025-4701 State: PUBLISHED Published: 2025-05-15T14:31:04.331Z Last Updated: 2025-05-15T15:08:21.207Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: VITA-MLLM Products: Freeze-Omni Problem Types: CWE-502, CWE-20 Description: A vulnerability, which was classified as problematic, has been found in VITA-MLLM Freeze-Omni up to 20250421. This issue affects the function torch.load of the file models/utils.py. The manipulation of the argument path leads to deserialization. It is possible to launch the attack on the local host. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308999 - https://vuldb.com/?ctiid.308999
nal Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.308999 - https://vuldb.com/?ctiid.308999 - https://vuldb.com/?submit.567796 - https://github.com/VITA-MLLM/Freeze-Omni/issues/29
CVE ID: CVE-2025-4702 State: PUBLISHED Published: 2025-05-15T15:00:08.434Z Last Updated: 2025-05-15T15:07:53.561Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Vehicle Parking Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Vehicle Parking Management System 1.13. Affected is an unknown function of the file /admin/add-category.php. The manipulation of the argument catename leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309000 - https://vuldb.com/?ctiid.309000 - https://vuldb.com/?submit.567805 - https://github.com/baixiaobai001/myCVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-4703 State: PUBLISHED Published: 2025-05-15T15:31:08.541Z Last Updated: 2025-05-15T15:46:52.418Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Vehicle Parking Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichmen
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309001 - https://vuldb.com/?ctiid.309001 - https://vuldb.com/?submit.567820 - https://github.com/baixiaobai001/myCVE/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-4704 State: PUBLISHED Published: 2025-05-15T15:31:12.298Z Last Updated: 2025-05-15T15:46:06.765Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Vehicle Parking Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-category.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309002 - https://vuldb.com/?ctiid.309002 - https://vuldb.com/?submit.567821 - https://github.com/baixiaobai001/myCVE/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-4705 State: PUBLISHED Published: 2025-05-15T16:00:12.745Z Last Updated: 2025-05-15T18:39:28.860Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Vehicle Parking Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been classified as critical. This affects an unknown part of the file /admin/view-incomingvehicle-detail.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309003 - https://vuldb.com/?ctiid.309003 - https://vuldb.com/?submit.567827 - https://github.com/baixiaobai001/myCVE/issues/4 - https://phpgurukul.com/
CVE ID: CVE-2025-4706 State: PUBLISHED Published: 2025-05-15T16:31:04.462Z Last Updated: 2025-05-15T19:48:51.315Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: projectworlds Products: Online Examination System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in projectworlds Online Examination System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /Procedure3b_yearwiseVisit.php. The manipulation of the argument Visit_year leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
s been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309004 - https://vuldb.com/?ctiid.309004 - https://vuldb.com/?submit.567923 - https://github.com/Welhelm666/666/issues/2
CVE ID: CVE-2025-4707 State: PUBLISHED Published: 2025-05-15T17:00:07.811Z Last Updated: 2025-05-15T19:18:52.509Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pages/transaction_add.php. The manipulation of the argument prod_name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
losed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309005 - https://vuldb.com/?ctiid.309005 - https://vuldb.com/?submit.568287 - https://github.com/lanxia0/CVE/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-4708 State: PUBLISHED Published: 2025-05-15T17:00:10.381Z Last Updated: 2025-05-15T18:56:02.804Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/sales_add.php. The manipulation of the argument discount leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309006 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309006 - https://vuldb.com/?ctiid.309006 - https://vuldb.com/?submit.568288 - https://github.com/lanxia0/CVE/issues/2 - https://www.campcodes.com/
CVE ID: CVE-2025-4709 State: PUBLISHED Published: 2025-05-15T17:31:05.188Z Last Updated: 2025-05-15T18:36:00.795Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/transaction_del.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
losed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309007 - https://vuldb.com/?ctiid.309007 - https://vuldb.com/?submit.568289 - https://github.com/lanxia0/CVE/issues/3 - https://www.campcodes.com/
CVE ID: CVE-2025-4710 State: PUBLISHED Published: 2025-05-15T17:31:07.119Z Last Updated: 2025-05-15T18:34:06.138Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in Campcodes Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /pages/transaction.php. The manipulation of the argument cid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
een disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309008 - https://vuldb.com/?ctiid.309008 - https://vuldb.com/?submit.568290 - https://github.com/lanxia0/CVE/issues/4 - https://www.campcodes.com/
CVE ID: CVE-2025-4711 State: PUBLISHED Published: 2025-05-15T18:00:06.835Z Last Updated: 2025-05-15T18:30:11.931Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /pages/stockin_add.php. The manipulation of the argument prod_name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.
d to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309009 - https://vuldb.com/?ctiid.309009 - https://vuldb.com/?submit.568291 - https://github.com/lanxia0/CVE/issues/5 - https://www.campcodes.com/
CVE ID: CVE-2025-4712 State: PUBLISHED Published: 2025-05-15T18:31:05.040Z Last Updated: 2025-05-19T14:32:27.352Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/account_summary.php. The manipulation of the argument cid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3090
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309010 - https://vuldb.com/?ctiid.309010 - https://vuldb.com/?submit.568292 - https://github.com/lanxia0/CVE/issues/6 - https://www.campcodes.com/
CVE ID: CVE-2025-4713 State: PUBLISHED Published: 2025-05-15T18:31:07.053Z Last Updated: 2025-05-19T14:33:15.599Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/print.php. The manipulation of the argument sid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309011 - https:/
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309011 - https://vuldb.com/?ctiid.309011 - https://vuldb.com/?submit.568293 - https://github.com/lanxia0/CVE/issues/7 - https://www.campcodes.com/
CVE ID: CVE-2025-4714 State: PUBLISHED Published: 2025-05-15T19:00:08.770Z Last Updated: 2025-05-19T14:33:59.348Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/reprint.php. The manipulation of the argument sid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309012 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309012 - https://vuldb.com/?ctiid.309012 - https://vuldb.com/?submit.568294 - https://github.com/lanxia0/CVE/issues/8 - https://www.campcodes.com/
CVE ID: CVE-2025-4715 State: PUBLISHED Published: 2025-05-15T19:31:05.858Z Last Updated: 2025-05-19T14:36:34.995Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /pages/view_application.php. The manipulation of the argument cid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309013 - https://vuldb.com/?ctiid.309013 - https://vuldb.com/?submit.568295 - https://github.com/lanxia0/CVE/issues/9 - https://www.campcodes.com/
CVE ID: CVE-2025-4716 State: PUBLISHED Published: 2025-05-15T19:31:07.937Z Last Updated: 2025-05-19T14:37:20.240Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pages/credit_transaction_add.php. The manipulation of the argument prod_name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
it has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309014 - https://vuldb.com/?ctiid.309014 - https://vuldb.com/?submit.568296 - https://github.com/lanxia0/CVE/issues/10 - https://www.campcodes.com/
CVE ID: CVE-2025-4717 State: PUBLISHED Published: 2025-05-15T20:00:09.333Z Last Updated: 2025-05-16T13:34:20.825Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Company Visitor Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Company Visitor Management System 2.0. Affected is an unknown function of the file /visitors-form.php. The manipulation of the argument fullname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
een disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309018 - https://vuldb.com/?ctiid.309018 - https://vuldb.com/?submit.568331 - https://github.com/baixiaobai001/myCVE/issues/7 - https://phpgurukul.com/
CVE ID: CVE-2025-4718 State: PUBLISHED Published: 2025-05-15T20:31:05.289Z Last Updated: 2025-05-15T20:45:24.130Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/customer_add.php. The manipulation of the argument last leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CIS
een disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309019 - https://vuldb.com/?ctiid.309019 - https://vuldb.com/?submit.568386 - https://github.com/usingns/CVE/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-4719 State: PUBLISHED Published: 2025-05-15T20:31:07.700Z Last Updated: 2025-05-15T20:42:55.897Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/cash_transaction.php. The manipulation of the argument cid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
losed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309020 - https://vuldb.com/?ctiid.309020 - https://vuldb.com/?submit.568387 - https://github.com/usingns/CVE/issues/2 - https://www.campcodes.com/
CVE ID: CVE-2025-4720 State: PUBLISHED Published: 2025-05-15T21:00:08.439Z Last Updated: 2025-05-16T13:39:03.409Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P) Vendors: SourceCodester Products: Student Result Management System Problem Types: CWE-22 Description: A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file academic/core/drop_student.php. The manipulation of the argument img leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309022 - https://vuldb.com/?ctiid.309022 - https://vuldb.com/?submit.569855 - https://github.com/Xiaoyi-ing/CVE/issues/4 - https://www.sourcecodester.com/
CVE ID: CVE-2025-4721 State: PUBLISHED Published: 2025-05-15T21:00:10.856Z Last Updated: 2025-05-16T13:38:17.170Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Placement Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in itsourcecode Placement Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /drive.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309023 - ht
blic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309023 - https://vuldb.com/?ctiid.309023 - https://vuldb.com/?submit.569945 - https://github.com/byxs0x0/cve/issues/3 - https://itsourcecode.com/
CVE ID: CVE-2025-4722 State: PUBLISHED Published: 2025-05-15T21:31:06.013Z Last Updated: 2025-05-16T13:22:26.878Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Placement Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file /edit_profile.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309024 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309024 - https://vuldb.com/?ctiid.309024 - https://vuldb.com/?submit.569951 - https://github.com/byxs0x0/cve/issues/4 - https://itsourcecode.com/