Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
d to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300675 - https://vuldb.com/?ctiid.300675 - https://vuldb.com/?submit.520482 - https://github.com/ydnd/cve/issues/7
CVE ID: CVE-2025-2660 State: PUBLISHED Published: 2025-03-23T19:00:06.766Z Last Updated: 2025-03-24T17:03:21.581Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Project Worlds Products: Online Time Table Generator Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Project Worlds Online Time Table Generator 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument e leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3006
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300676 - https://vuldb.com/?ctiid.300676 - https://vuldb.com/?submit.520483 - https://github.com/ydnd/cve/issues/8
CVE ID: CVE-2025-2661 State: PUBLISHED Published: 2025-03-23T19:31:04.626Z Last Updated: 2025-03-24T16:55:20.121Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Project Worlds Products: Online Time Table Generator Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Project Worlds Online Time Table Generator 1.0 and classified as critical. This issue affects some unknown processing of the file /staff/index.php. The manipulation of the argument e leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300677
he public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300677 - https://vuldb.com/?ctiid.300677 - https://vuldb.com/?submit.520484 - https://github.com/ydnd/cve/issues/9
CVE ID: CVE-2025-2662 State: PUBLISHED Published: 2025-03-23T20:00:09.228Z Last Updated: 2025-03-24T16:36:42.643Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Project Worlds Products: Online Time Table Generator Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Project Worlds Online Time Table Generator 1.0. It has been classified as critical. Affected is an unknown function of the file student/studentdashboard.php. The manipulation of the argument course leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300678 - https://vuldb.com/?ctiid.300678 - https://vuldb.com/?submit.520503 - https://github.com/ydnd/cve/issues/10
CVE ID: CVE-2025-2663 State: PUBLISHED Published: 2025-03-23T20:31:05.442Z Last Updated: 2025-03-24T16:16:07.497Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Bank Locker Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Bank Locker Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /search-locker-details.php. The manipulation of the argument searchinput leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refere
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300685 - https://vuldb.com/?ctiid.300685 - https://vuldb.com/?submit.520436 - https://github.com/ARPANET-cyber/CVE/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-2664 State: PUBLISHED Published: 2025-03-23T21:00:09.723Z Last Updated: 2025-04-10T14:50:01.640Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: CodeZips Products: Hospital Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in CodeZips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /suadpeted.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300686 - htt
lic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300686 - https://vuldb.com/?ctiid.300686 - https://vuldb.com/?submit.520780 - https://github.com/emano888/CodeZips-Hospital-Management-System/blob/main/SQL_Injection_in_Hospital_Management_System.md
CVE ID: CVE-2025-2665 State: PUBLISHED Published: 2025-03-23T21:31:04.838Z Last Updated: 2025-03-24T16:09:51.616Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online Security Guards Hiring System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichm
k remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300687 - https://vuldb.com/?ctiid.300687 - https://vuldb.com/?submit.521167 - https://github.com/i-Corner/cve/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-2667 State: PUBLISHED Published: 2025-09-04T14:45:23.819Z Last Updated: 2025-09-04T15:06:16.676Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Sterling B2B Integrator, Sterling File Gateway Problem Types: CWE-497 Description: IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 could disclose sensitive system information about the server to a privileged user that could aid in further attacks against the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7244
the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7244021
CVE ID: CVE-2025-2670 State: PUBLISHED Published: 2025-07-09T14:27:56.151Z Last Updated: 2025-08-24T11:19:24.916Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: OpenPages Problem Types: CWE-497 Description: IBM OpenPages 9.0 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points related to workflow feature of OpenPages. An authenticated user is able to obtain certain information about Workflow related configuration and internal state. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7239153
CVE ID: CVE-2025-2671 State: PUBLISHED Published: 2025-03-23T22:00:09.708Z Last Updated: 2025-03-24T15:59:22.537Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Yue Lao Products: Blind Box 月老盲盒 Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in Yue Lao Blind Box 月老盲盒 up to 4.0. It has been declared as critical. This vulnerability affects the function base64image of the file /app/controller/Upload.php. The manipulation of the argument data leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300
o the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300688 - https://vuldb.com/?ctiid.300688 - https://vuldb.com/?submit.521169 - https://www.jianshu.com/p/f8ca5e3cd889
CVE ID: CVE-2025-2672 State: PUBLISHED Published: 2025-03-23T23:00:06.850Z Last Updated: 2025-03-24T13:14:06.663Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Payroll Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Payroll Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /add_deductions.php. The manipulation of the argument bir leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichm
o the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300689 - https://vuldb.com/?ctiid.300689 - https://vuldb.com/?submit.521243 - https://github.com/FoLaJJ/cve/blob/main/sqlcve.md - https://code-projects.org/
CVE ID: CVE-2025-2673 State: PUBLISHED Published: 2025-03-23T23:31:04.040Z Last Updated: 2025-03-24T13:09:12.341Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: code-projects Products: Payroll Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in code-projects Payroll Management System 1.0. Affected is an unknown function of the file /home_employee.php. The manipulation of the argument division leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vul
osed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300690 - https://vuldb.com/?ctiid.300690 - https://vuldb.com/?submit.521244 - https://github.com/FoLaJJ/cve/blob/main/xsscve.md - https://code-projects.org/
CVE ID: CVE-2025-2674 State: PUBLISHED Published: 2025-03-24T00:00:09.129Z Last Updated: 2025-03-24T12:59:30.238Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Bank Locker Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Bank Locker Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /aboutus.php. The manipulation of the argument pagetitle leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
closed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300691 - https://vuldb.com/?ctiid.300691 - https://vuldb.com/?submit.521441 - https://github.com/ARPANET-cyber/CVE/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-2675 State: PUBLISHED Published: 2025-03-24T00:31:05.258Z Last Updated: 2025-03-24T12:53:42.142Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Bank Locker Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Bank Locker Management System 1.0. Affected by this issue is some unknown functionality of the file /add-lockertype.php. The manipulation of the argument lockerprice leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300692 - https://vuldb.com/?ctiid.300692 - https://vuldb.com/?submit.521442 - https://github.com/ARPANET-cyber/CVE/issues/4 - https://phpgurukul.com/
CVE ID: CVE-2025-2676 State: PUBLISHED Published: 2025-03-24T01:00:08.035Z Last Updated: 2025-03-24T12:49:06.244Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Bank Locker Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file /add-subadmin.php. The manipulation of the argument sadminusername leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300693 - https://vuldb.com/?ctiid.300693 - https://vuldb.com/?submit.521443 - https://github.com/ARPANET-cyber/CVE/issues/5 - https://phpgurukul.com/
CVE ID: CVE-2025-2677 State: PUBLISHED Published: 2025-03-24T01:31:05.743Z Last Updated: 2025-03-24T12:41:31.286Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Bank Locker Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Bank Locker Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /changeidproof.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300694 - https://vuldb.com/?ctiid.300694 - https://vuldb.com/?submit.521444 - https://github.com/ARPANET-cyber/CVE/issues/6 - https://phpgurukul.com/
CVE ID: CVE-2025-2678 State: PUBLISHED Published: 2025-03-24T02:00:08.657Z Last Updated: 2025-03-24T12:38:08.491Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Bank Locker Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Bank Locker Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /changeimage1.php. The manipulation of the argument editid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3006
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300695 - https://vuldb.com/?ctiid.300695 - https://vuldb.com/?submit.521445 - https://github.com/ARPANET-cyber/CVE/issues/7 - https://phpgurukul.com/
CVE ID: CVE-2025-2679 State: PUBLISHED Published: 2025-03-24T02:31:05.647Z Last Updated: 2025-03-24T12:30:31.429Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Bank Locker Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /contact-us.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
osed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300696 - https://vuldb.com/?ctiid.300696 - https://vuldb.com/?submit.521447 - https://github.com/ARPANET-cyber/CVE/issues/8 - https://phpgurukul.com/
CVE ID: CVE-2025-2680 State: PUBLISHED Published: 2025-03-24T03:00:08.290Z Last Updated: 2025-03-24T12:24:43.805Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Bank Locker Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /edit-assign-locker.php?ltid=1. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
motely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300697 - https://vuldb.com/?ctiid.300697 - https://vuldb.com/?submit.521448 - https://github.com/ARPANET-cyber/CVE/issues/9 - https://phpgurukul.com/
CVE ID: CVE-2025-2681 State: PUBLISHED Published: 2025-03-24T03:31:05.368Z Last Updated: 2025-03-24T15:55:27.000Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Bank Locker Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /edit-locker.php?ltid=6. The manipulation of the argument lockersize leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300698 - https://vuldb.com/?ctiid.300698 - https://vuldb.com/?submit.521450 - https://github.com/ARPANET-cyber/CVE/issues/10 - https://phpgurukul.com/
CVE ID: CVE-2025-2682 State: PUBLISHED Published: 2025-03-24T04:00:09.319Z Last Updated: 2025-03-24T15:42:07.745Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Bank Locker Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file /edit-subadmin.php?said=3. The manipulation of the argument mobilenumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300699 - https://vuldb.com/?ctiid.300699 - https://vuldb.com/?submit.521451 - https://github.com/ARPANET-cyber/CVE/issues/11 - https://phpgurukul.com/
CVE ID: CVE-2025-2683 State: PUBLISHED Published: 2025-03-24T04:31:04.941Z Last Updated: 2025-03-24T15:39:15.497Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Bank Locker Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Bank Locker Management System 1.0. This vulnerability affects unknown code of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300700 - h
ublic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300700 - https://vuldb.com/?ctiid.300700 - https://vuldb.com/?submit.521452 - https://github.com/ARPANET-cyber/CVE/issues/12 - https://phpgurukul.com/
CVE ID: CVE-2025-2684 State: PUBLISHED Published: 2025-03-24T05:00:11.075Z Last Updated: 2025-03-24T15:30:23.481Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Bank Locker Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Bank Locker Management System 1.0. This issue affects some unknown processing of the file /search-report-details.php. The manipulation of the argument searchinput leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300701 - https://vuldb.com/?ctiid.300701 - https://vuldb.com/?submit.521453 - https://github.com/ARPANET-cyber/CVE/issues/13 - https://phpgurukul.com/
CVE ID: CVE-2025-2685 State: PUBLISHED Published: 2025-03-27T05:22:30.339Z Last Updated: 2025-03-27T14:38:55.202Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: tobiasbg Products: TablePress – Tables in WordPress made easy Problem Types: CWE-79 Description: The TablePress – Tables in WordPress made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘table-name’ parameter in all versions up to, and including, 3.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a u
d attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e285849f-886e-49ba-bb43-8c67655fe239?source=cve - https://plugins.trac.wordpress.org/browser/tablepress/trunk/views/class-all-tables-list-table.php#L242 - https://plugins.trac.wordpress.org/changeset/3261229/
CVE ID: CVE-2025-2686 State: PUBLISHED Published: 2025-03-24T05:31:08.563Z Last Updated: 2025-03-24T15:24:14.160Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: mingyuefusu 明月复苏 Products: tushuguanlixitong 图书管理系统 Problem Types: CWE-284, CWE-266 Description: A vulnerability has been found in mingyuefusu 明月复苏 tushuguanlixitong 图书管理系统 up to d4836f6b49cd0ac79a4021b15ce99ff7229d4694 and classified as critical. Affected by this vulnerability is the function doFilter of the file /admin/ of the component Backend. The manipulation of the argument Request leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the pub
equest leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300703 - https://vuldb.com/?ctiid.300703 - https://vuldb.com/?submit.521449 - https://gitee.com/mingyuefusu/tushuguanlixitong/issues/IBTS25
CVE ID: CVE-2025-2687 State: PUBLISHED Published: 2025-03-24T06:00:12.375Z Last Updated: 2025-03-24T12:22:21.869Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: eLearning System Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical has been found in PHPGurukul eLearning System 1.0. Affected is an unknown function of the file /user/index.php of the component Image Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.300708 - https://v