Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
disclosed to the public and may be used. Upgrading to version 3.1.3 is able to address this issue. The patch is named 33d9bb464353015aaaba84e27638ac9a3912795d. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317815 - https://vuldb.com/?ctiid.317815 - https://vuldb.com/?submit.622169 - https://gitee.com/yanyutao0402/ChanCMS/issues/ICLP81 - https://gitee.com/yanyutao0402/ChanCMS/commit/33d9bb464353015aaaba84e27638ac9a3912795d - https://gitee.com/yanyutao0402/ChanCMS/tree/V3.1.3
CVE ID: CVE-2025-8228 State: PUBLISHED Published: 2025-07-27T09:32:15.400Z Last Updated: 2025-07-28T14:56:29.713Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C) Vendors: yanyutao0402 Products: ChanCMS Problem Types: CWE-918 Description: A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been rated as critical. Affected by this issue is the function getPages of the file /cms/collect/getPages. The manipulation of the argument targetUrl leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.1.3 is able to address this issue. It is recommended to upgra
osed to the public and may be used. Upgrading to version 3.1.3 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317816 - https://vuldb.com/?ctiid.317816 - https://vuldb.com/?submit.622171 - https://gitee.com/yanyutao0402/ChanCMS/issues/ICLP28 - https://gitee.com/yanyutao0402/ChanCMS/releases/tag/V3.1.3
CVE ID: CVE-2025-8229 State: PUBLISHED Published: 2025-07-27T10:02:05.663Z Last Updated: 2025-07-28T14:55:41.993Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Courier Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in Campcodes Courier Management System 1.0. This affects an unknown part of the file /parcel_list.php. The manipulation of the argument s leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.31781
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317817 - https://vuldb.com/?ctiid.317817 - https://vuldb.com/?submit.622322 - https://github.com/XiaoJiesecqwq/CVE/issues/13 - https://www.campcodes.com/
CVE ID: CVE-2025-8230 State: PUBLISHED Published: 2025-07-27T12:02:06.447Z Last Updated: 2025-07-28T14:54:56.766Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Courier Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in Campcodes Courier Management System 1.0. This vulnerability affects unknown code of the file /manage_user.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317818 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317818 - https://vuldb.com/?ctiid.317818 - https://vuldb.com/?submit.622330 - https://github.com/XiaoJiesecqwq/CVE/issues/14 - https://www.campcodes.com/
CVE ID: CVE-2025-8231 State: PUBLISHED Published: 2025-07-27T13:32:05.676Z Last Updated: 2025-07-28T14:54:07.399Z Severity: N/A (CVSS 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-890L Problem Types: CWE-798, CWE-259 Description: A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04. This issue affects some unknown processing of the file rgbin of the component UART Port. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the
en disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317819 - https://vuldb.com/?ctiid.317819 - https://vuldb.com/?submit.622337 - https://github.com/Nicholas-wei/bug-discovery/blob/main/dlink/dir890-hardcoded/dir890-hardcoded.md - https://www.dlink.com/
CVE ID: CVE-2025-8232 State: PUBLISHED Published: 2025-07-27T14:02:05.440Z Last Updated: 2025-07-28T17:00:18.215Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/delete_user.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
een disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317820 - https://vuldb.com/?ctiid.317820 - https://vuldb.com/?submit.622387 - https://github.com/xiajian-qx/cve-xiajian/issues/7 - https://code-projects.org/
CVE ID: CVE-2025-8233 State: PUBLISHED Published: 2025-07-27T14:32:05.209Z Last Updated: 2025-07-28T17:01:09.814Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/user.php. The manipulation of the argument un leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
it has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317821 - https://vuldb.com/?ctiid.317821 - https://vuldb.com/?submit.622388 - https://github.com/xiajian-qx/cve-xiajian/issues/6 - https://code-projects.org/
CVE ID: CVE-2025-8234 State: PUBLISHED Published: 2025-07-27T15:02:05.383Z Last Updated: 2025-07-28T17:02:49.085Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/delete_member.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317822 - https://vuldb.com/?ctiid.317822 - https://vuldb.com/?submit.622389 - https://github.com/xiajian-qx/cve-xiajian/issues/5 - https://code-projects.org/
CVE ID: CVE-2025-8235 State: PUBLISHED Published: 2025-07-27T16:02:06.108Z Last Updated: 2025-07-28T17:04:17.324Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Online Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/product.php. The manipulation of the argument Name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317823 - https://vuldb.com/?ctiid.317823 - https://vuldb.com/?submit.622390 - https://github.com/xiajian-qx/cve-xiajian/issues/4 - https://code-projects.org/
CVE ID: CVE-2025-8236 State: PUBLISHED Published: 2025-07-27T17:32:04.928Z Last Updated: 2025-07-28T17:06:42.120Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Online Ordering System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit_product.php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317824 - https://vuldb.com/?ctiid.317824 - https://vuldb.com/?submit.622391 - https://github.com/xiajian-qx/cve-xiajian/issues/3 - https://code-projects.org/
CVE ID: CVE-2025-8237 State: PUBLISHED Published: 2025-07-27T18:02:05.893Z Last Updated: 2025-07-28T17:07:36.417Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Exam Form Submission Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Exam Form Submission 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/update_s1.php. The manipulation of the argument credits leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317825 - https://vuldb.com/?ctiid.317825 - https://vuldb.com/?submit.622398 - https://github.com/xiajian-qx/cve-xiajian/issues/10 - https://code-projects.org/
CVE ID: CVE-2025-8238 State: PUBLISHED Published: 2025-07-27T18:32:05.871Z Last Updated: 2025-07-28T17:09:12.174Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Exam Form Submission Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/update_s2.php. The manipulation of the argument credits leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
losed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317826 - https://vuldb.com/?ctiid.317826 - https://vuldb.com/?submit.622397 - https://github.com/xiajian-qx/cve-xiajian/issues/11 - https://code-projects.org/
CVE ID: CVE-2025-8239 State: PUBLISHED Published: 2025-07-27T19:02:05.527Z Last Updated: 2025-07-28T17:10:03.656Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Exam Form Submission Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in code-projects Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
sed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317827 - https://vuldb.com/?ctiid.317827 - https://vuldb.com/?submit.622399 - https://github.com/xiajian-qx/cve-xiajian/issues/9 - https://code-projects.org/
CVE ID: CVE-2025-8240 State: PUBLISHED Published: 2025-07-27T19:32:05.165Z Last Updated: 2025-07-28T17:10:53.140Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Exam Form Submission Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. Affected by this issue is some unknown functionality of the file /user/dashboard.php. The manipulation of the argument phone leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317828 - https://vuldb.com/?ctiid.317828 - https://vuldb.com/?submit.622400 - https://github.com/xiajian-qx/cve-xiajian/issues/8 - https://code-projects.org/
CVE ID: CVE-2025-8241 State: PUBLISHED Published: 2025-07-27T20:32:05.306Z Last Updated: 2025-07-28T17:11:42.161Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: 1000 Projects Products: ABC Courier Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in 1000 Projects ABC Courier Management System 1.0. This affects an unknown part of the file /report.php. The manipulation of the argument From leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
as been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317829 - https://vuldb.com/?ctiid.317829 - https://vuldb.com/?submit.622432 - https://github.com/online-Y/CVE/issues/1 - https://1000projects.org/
CVE ID: CVE-2025-8242 State: PUBLISHED Published: 2025-07-27T21:02:08.278Z Last Updated: 2025-07-28T13:57:20.568Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: X15 Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation of the argument ip6addr/url/vpnPassword/vpnUser leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vu
nitiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317830 - https://vuldb.com/?ctiid.317830 - https://vuldb.com/?submit.622661 - https://vuldb.com/?submit.622662 - https://vuldb.com/?submit.622664 - https://vuldb.com/?submit.622665 - https://github.com/panda666-888/vuls/blob/main/totolink/x15/formFilter_ip6addr.md - https://github.com/panda666-888/vuls/blob/main/totolink/x15/formFilter_url.md - https://www.totolink.net/
CVE ID: CVE-2025-8243 State: PUBLISHED Published: 2025-07-27T21:32:17.124Z Last Updated: 2025-07-28T17:12:52.220Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: X15 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formMapDel of the component HTTP POST Request Handler. The manipulation of the argument devicemac1 leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317831 - https://vuldb.com/?ctiid.317831 - https://vuldb.com/?submit.622691 - https://github.com/panda666-888/vuls/blob/main/totolink/x15/formMapDel.md - https://www.totolink.net/
CVE ID: CVE-2025-8244 State: PUBLISHED Published: 2025-07-27T22:02:07.627Z Last Updated: 2025-07-28T17:13:30.685Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: X15 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unknown function of the file /boafrm/formMapDelDevice of the component HTTP POST Request Handler. The manipulation of the argument macstr leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
ly. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317832 - https://vuldb.com/?ctiid.317832 - https://vuldb.com/?submit.622692 - https://github.com/panda666-888/vuls/blob/main/totolink/x15/formMapDelDevice.md - https://www.totolink.net/
CVE ID: CVE-2025-8245 State: PUBLISHED Published: 2025-07-27T22:32:08.314Z Last Updated: 2025-07-28T17:14:20.293Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: X15 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMultiAPVLAN of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA AD
be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317833 - https://vuldb.com/?ctiid.317833 - https://vuldb.com/?submit.622693 - https://github.com/panda666-888/vuls/blob/main/totolink/x15/formMultiAPVLAN.md - https://www.totolink.net/
CVE ID: CVE-2025-8246 State: PUBLISHED Published: 2025-07-27T23:02:08.199Z Last Updated: 2025-07-28T17:15:08.563Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: X15 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formRoute of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
motely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317834 - https://vuldb.com/?ctiid.317834 - https://vuldb.com/?submit.622697 - https://github.com/panda666-888/vuls/blob/main/totolink/x15/formRoute.md - https://www.totolink.net/
CVE ID: CVE-2025-8247 State: PUBLISHED Published: 2025-07-27T23:32:04.936Z Last Updated: 2025-07-28T17:15:46.237Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Projectworlds Products: Online Admission System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in Projectworlds Online Admission System 1.0. This affects an unknown part of the file /admin.php. The manipulation of the argument markof leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.31
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317835 - https://vuldb.com/?ctiid.317835 - https://vuldb.com/?submit.622711 - https://github.com/ht4266394/cve/issues/1
CVE ID: CVE-2025-8248 State: PUBLISHED Published: 2025-07-28T00:02:06.348Z Last Updated: 2025-07-28T17:16:24.252Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in code-projects Online Ordering System 1.0. This vulnerability affects unknown code of the file /signup.php. The manipulation of the argument firstname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichme
the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317836 - https://vuldb.com/?ctiid.317836 - https://vuldb.com/?submit.622392 - https://github.com/xiajian-qx/cve-xiajian/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-8249 State: PUBLISHED Published: 2025-07-28T00:32:05.710Z Last Updated: 2025-07-28T13:34:29.254Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Exam Form Submission Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. This issue affects some unknown processing of the file /admin/update_s3.php. The manipulation of the argument credits leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317837 - https://vuldb.com/?ctiid.317837 - https://vuldb.com/?submit.622435 - https://github.com/Dingzenggonpo/cve/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-8250 State: PUBLISHED Published: 2025-07-28T01:04:06.696Z Last Updated: 2025-07-28T17:22:43.549Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Exam Form Submission Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/update_s4.php. The manipulation of the argument credits leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
en disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.317838 - https://vuldb.com/?ctiid.317838 - https://vuldb.com/?submit.622433 - https://github.com/Dingzenggonpo/cve/issues/3 - https://code-projects.org/