Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-12306 State: PUBLISHED Published: 2025-10-27T18:32:10.935Z Last Updated: 2025-10-27T20:37:24.576Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Nero Social Networking Site Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in code-projects Nero Social Networking Site 1.0. Affected is an unknown function of the file /acceptoffres.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329978 -
ed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329978 - https://vuldb.com/?ctiid.329978 - https://vuldb.com/?submit.676790 - https://github.com/yuan466/CVE/blob/main/one/report.md - https://code-projects.org/
CVE ID: CVE-2025-12307 State: PUBLISHED Published: 2025-10-27T19:02:05.517Z Last Updated: 2025-10-27T20:37:54.245Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Nero Social Networking Site Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in code-projects Nero Social Networking Site 1.0. Affected by this vulnerability is an unknown functionality of the file /addfriend.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3
ly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329979 - https://vuldb.com/?ctiid.329979 - https://vuldb.com/?submit.676808 - https://github.com/yuan466/CVE/blob/main/two/report.md - https://code-projects.org/
CVE ID: CVE-2025-12308 State: PUBLISHED Published: 2025-10-27T19:02:08.377Z Last Updated: 2025-10-27T20:38:22.509Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Nero Social Networking Site Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in code-projects Nero Social Networking Site 1.0. Affected by this issue is some unknown functionality of the file /deletemessage.php. Performing manipulation of the argument message_id results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment
ely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329980 - https://vuldb.com/?ctiid.329980 - https://vuldb.com/?submit.676817 - https://github.com/yuan466/CVE/blob/main/three/report.md - https://code-projects.org/
CVE ID: CVE-2025-12309 State: PUBLISHED Published: 2025-10-27T19:02:11.093Z Last Updated: 2025-10-27T19:23:24.602Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Nero Social Networking Site Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in code-projects Nero Social Networking Site 1.0. This affects an unknown part of the file /friendprofile.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
e to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329981 - https://vuldb.com/?ctiid.329981 - https://vuldb.com/?submit.676964 - https://github.com/daojian1/Nero-Social-Networking-Site-V1.0_002 - https://code-projects.org/
CVE ID: CVE-2025-12310 State: PUBLISHED Published: 2025-10-27T19:32:05.375Z Last Updated: 2025-10-27T20:27:37.336Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R) Vendors: n/a Products: VirtFusion Problem Types: CWE-307, CWE-799 Description: A security vulnerability has been detected in VirtFusion up to 6.0.2. This vulnerability affects unknown code of the file /account/_settings of the component Email Change Handler. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but di
ly. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329982 - https://vuldb.com/?ctiid.329982 - https://vuldb.com/?submit.676825
CVE ID: CVE-2025-12311 State: PUBLISHED Published: 2025-10-27T19:32:08.818Z Last Updated: 2025-10-27T20:26:19.253Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Curfew e-Pass Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was detected in PHPGurukul Curfew e-Pass Management System 1.0. This issue affects some unknown processing of the file edit-category-detail.php. The manipulation of the argument catname results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329983 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329983 - https://vuldb.com/?ctiid.329983 - https://vuldb.com/?submit.676867 - https://github.com/kiyoleee/CVE/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-12312 State: PUBLISHED Published: 2025-10-27T19:32:12.160Z Last Updated: 2025-10-27T20:25:31.769Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Curfew e-Pass Management System Problem Types: CWE-79, CWE-94 Description: A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. Impacted is an unknown function of the file view-pass-detail.php. This manipulation of the argument Fullname/Category causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329984 - https://
nd may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329984 - https://vuldb.com/?ctiid.329984 - https://vuldb.com/?submit.676974 - https://github.com/kiyoleee/CVE/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-12313 State: PUBLISHED Published: 2025-10-27T20:02:06.408Z Last Updated: 2025-10-27T20:22:23.877Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DI-7001 MINI Problem Types: CWE-77, CWE-74 Description: A vulnerability has been found in D-Link DI-7001 MINI 19.09.19A1/24.04.18B1. The affected element is an unknown function of the file /msp_info.htm. Such manipulation of the argument cmd leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329985 - https://vuldb.com/?ctiid
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329985 - https://vuldb.com/?ctiid.329985 - https://vuldb.com/?submit.676887 - https://github.com/DavCloudz/cve/issues/7 - https://www.dlink.com/
CVE ID: CVE-2025-12314 State: PUBLISHED Published: 2025-10-27T20:02:09.659Z Last Updated: 2025-10-28T06:28:30.719Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Food Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/deleteitem.php. Performing manipulation of the argument itemID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329986 - ht
ic and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329986 - https://vuldb.com/?ctiid.329986 - https://vuldb.com/?submit.677029 - https://github.com/kaka00666/food-ordering-cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-12315 State: PUBLISHED Published: 2025-10-27T20:02:12.148Z Last Updated: 2025-10-30T15:01:14.577Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Food Ordering System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in code-projects Food Ordering System 1.0. This affects an unknown function of the file /admin/menu.php. Executing manipulation of the argument itemPrice can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329987 - https://vuld
e utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329987 - https://vuldb.com/?ctiid.329987 - https://vuldb.com/?submit.677036 - https://github.com/kaka00666/food-ordering-cve/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-12316 State: PUBLISHED Published: 2025-10-27T20:32:05.320Z Last Updated: 2025-10-28T14:50:43.387Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Courier Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in code-projects Courier Management System 1.0. This impacts an unknown function of the file /courier/edit-courier.php. The manipulation of the argument OfficeName leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329
available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329988 - https://vuldb.com/?ctiid.329988 - https://vuldb.com/?submit.677084 - https://github.com/Abxery/cveee/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-12322 State: PUBLISHED Published: 2025-10-27T20:32:09.364Z Last Updated: 2025-10-28T14:50:06.689Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: CH22 Problem Types: CWE-120, CWE-119 Description: A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromNatStaticSetting of the file /goform/NatStaticSetting. Executing manipulation of the argument page can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.330101 - https://vuldb.com/?ctiid.330101 - ht
nalyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.330101 - https://vuldb.com/?ctiid.330101 - https://vuldb.com/?submit.674151 - https://github.com/QIU-DIE/CVE/issues/19 - https://www.tenda.com.cn/
CVE ID: CVE-2025-12324 State: PUBLISHED Published: 2025-11-04T02:26:55.497Z Last Updated: 2025-11-05T14:49:27.004Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: tobiasbg Products: TablePress – Tables in WordPress made easy Problem Types: CWE-79 Description: The TablePress – Tables in WordPress made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `table` shortcode attributes in all versions up to, and including, 3.2.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary we
tes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4dbd8cac-9e4b-4353-9c62-9cabb60b927c?source=cve - https://plugins.trac.wordpress.org/browser/tablepress/tags/3.2.4/controllers/controller-frontend.php#L605
CVE ID: CVE-2025-12325 State: PUBLISHED Published: 2025-10-27T20:32:12.484Z Last Updated: 2025-10-28T14:49:25.142Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.330102
e public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.330102 - https://vuldb.com/?ctiid.330102 - https://vuldb.com/?submit.674162 - https://github.com/yishengsss/CVE-Best-house-rental-management-system-V1.0-admin_class.php-save_house-SQL-injection/blob/main/report.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-12326 State: PUBLISHED Published: 2025-10-27T21:02:05.555Z Last Updated: 2025-10-28T14:28:59.114Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: shawon100 Products: RUET OJ Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. This vulnerability affects unknown code of the file /process.php of the component POST Request Handler. The manipulation of the argument un results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used. This product does not use versioning. This is why information about affected and unaf
een made public and could be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.330103 - https://vuldb.com/?ctiid.330103 - https://vuldb.com/?submit.674322
CVE ID: CVE-2025-12327 State: PUBLISHED Published: 2025-10-27T21:02:07.613Z Last Updated: 2025-10-28T14:28:35.791Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: shawon100 Products: RUET OJ Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. This issue affects some unknown processing of the file /description.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. This product uses a rolling release model to deliver continuous updates. As a result, specific version i
ay be utilized. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.330104 - https://vuldb.com/?ctiid.330104 - https://vuldb.com/?submit.674349
CVE ID: CVE-2025-12328 State: PUBLISHED Published: 2025-10-27T21:32:05.306Z Last Updated: 2025-10-28T15:03:29.607Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: shawon100 Products: RUET OJ Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. Impacted is an unknown function of the file /contestproblem.php. Such manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version de
d. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.330105 - https://vuldb.com/?ctiid.330105 - https://vuldb.com/?submit.674399
CVE ID: CVE-2025-12329 State: PUBLISHED Published: 2025-10-27T21:32:07.288Z Last Updated: 2025-10-28T15:02:27.795Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: shawon100 Products: RUET OJ Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. The affected element is an unknown function of the file /details.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited. This product follows a rolling release approach for continuous delivery, so ve
eased to the public and may be exploited. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.330106 - https://vuldb.com/?ctiid.330106 - https://vuldb.com/?submit.674401
CVE ID: CVE-2025-12330 State: PUBLISHED Published: 2025-10-27T22:02:05.611Z Last Updated: 2025-10-28T19:46:06.033Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Willow Products: CMS Problem Types: CWE-79, CWE-94 Description: A security flaw has been discovered in Willow CMS up to 1.4.0. This issue affects some unknown processing of the file /admin/articles/add of the component Add Post Page. The manipulation of the argument title/body results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.33011
ublic and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.330115 - https://vuldb.com/?ctiid.330115 - https://vuldb.com/?submit.674404 - https://github.com/matthewdeaves/willow/issues/131 - https://www.youtube.com/watch?v=jhFCYpFu9qI
CVE ID: CVE-2025-12331 State: PUBLISHED Published: 2025-10-27T22:02:08.240Z Last Updated: 2025-10-28T19:47:11.849Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Willow Products: CMS Problem Types: CWE-434, CWE-284 Description: A weakness has been identified in Willow CMS up to 1.4.0. Impacted is an unknown function of the file /admin/images/add. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.330116 - https://vuldb.com/?ctiid.330116 - https://vuldb.com/?sub
ADP Vulnrichment: References: - https://vuldb.com/?id.330116 - https://vuldb.com/?ctiid.330116 - https://vuldb.com/?submit.674439 - https://github.com/matthewdeaves/willow/issues/132 - https://www.youtube.com/watch?v=zacD0QLUYs8
CVE ID: CVE-2025-12332 State: PUBLISHED Published: 2025-10-27T23:22:09.778Z Last Updated: 2025-10-28T14:42:24.924Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Student Grades Management System Problem Types: CWE-79, CWE-94 Description: A flaw has been found in SourceCodester Student Grades Management System 1.0. This affects the function delete_user of the file /admin.php. Executing manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.330119 - https://vuldb.com/?ctii
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.330119 - https://vuldb.com/?ctiid.330119 - https://vuldb.com/?submit.674456 - https://vuldb.com/?submit.674457 - https://github.com/sanin-s1r3n/CVE-Research/blob/main/CVE-4 - https://www.sourcecodester.com/
CVE ID: CVE-2025-12333 State: PUBLISHED Published: 2025-10-27T22:32:08.847Z Last Updated: 2025-10-28T19:49:34.911Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: E-Commerce Website Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/supplier_add.php. The manipulation of the argument supp_name/supp_address leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
losed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.330120 - https://vuldb.com/?ctiid.330120 - https://vuldb.com/?submit.674483 - https://figshare.com/s/b35b6f6f6a10d8fdc131?file=58703836 - https://code-projects.org/
CVE ID: CVE-2025-12334 State: PUBLISHED Published: 2025-10-27T22:32:11.542Z Last Updated: 2025-10-28T19:50:33.682Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: E-Commerce Website Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/product_add.php. The manipulation of the argument prod_name/prod_desc/prod_cost results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.330121
public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.330121 - https://vuldb.com/?ctiid.330121 - https://vuldb.com/?submit.674484 - https://figshare.com/s/026d2a9dffbc7385777b - https://code-projects.org/
CVE ID: CVE-2025-12335 State: PUBLISHED Published: 2025-10-27T23:32:05.507Z Last Updated: 2025-10-28T14:28:38.927Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: E-Commerce Website Problem Types: CWE-79, CWE-94 Description: A vulnerability was determined in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supplier_update.php. This manipulation of the argument supp_name/supp_address causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
loit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.330122 - https://vuldb.com/?ctiid.330122 - https://vuldb.com/?submit.674485 - https://figshare.com/s/3e547f5ef85470696c2a - https://code-projects.org/