Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-6860 State: PUBLISHED Published: 2025-06-29T13:00:13.680Z Last Updated: 2025-06-30T15:43:24.496Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /panel/staff_commision.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrich
ed remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314332 - https://vuldb.com/?ctiid.314332 - https://vuldb.com/?submit.603374 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-12.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-6861 State: PUBLISHED Published: 2025-06-29T14:00:18.916Z Last Updated: 2025-06-30T15:41:40.404Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /panel/add_plan.php. The manipulation of the argument plan_name/description/duration_days/price leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes:
tack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314333 - https://vuldb.com/?ctiid.314333 - https://vuldb.com/?submit.603375 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-13.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-6862 State: PUBLISHED Published: 2025-06-29T14:31:05.470Z Last Updated: 2025-06-30T15:32:26.235Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/edit_plan.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314334 - https://vuldb.com/?ctiid.314334 - https://vuldb.com/?submit.603378 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-14.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-6863 State: PUBLISHED Published: 2025-06-29T15:00:13.761Z Last Updated: 2025-06-30T15:40:30.481Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Local Services Search Engine Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. Affected by this vulnerability is an unknown functionality of the file /admin/edit-category-detail.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Ana
ction. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314335 - https://vuldb.com/?ctiid.314335 - https://vuldb.com/?submit.603386 - https://github.com/louis-zly/myCVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-6864 State: PUBLISHED Published: 2025-06-29T16:00:09.143Z Last Updated: 2025-06-30T15:39:34.318Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: n/a Products: SeaCMS Problem Types: CWE-352, CWE-862 Description: A vulnerability, which was classified as problematic, has been found in SeaCMS up to 13.2. Affected by this issue is some unknown functionality of the file /admin_type.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314336 - https://vuldb.com/?ct
d. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314336 - https://vuldb.com/?ctiid.314336 - https://vuldb.com/?submit.603562 - https://github.com/murongchengshu/zhicheng_tan/blob/main/SeaCMS_1.md
CVE ID: CVE-2025-6865 State: PUBLISHED Published: 2025-06-29T17:02:04.913Z Last Updated: 2025-06-30T15:35:20.189Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: n/a Products: DaiCuo Problem Types: CWE-352, CWE-862 Description: A vulnerability, which was classified as problematic, was found in DaiCuo up to 1.3.13. This affects an unknown part of the file /admin.php/addon/index. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314337 - https://vuldb.com/?ctiid.31433
onal Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314337 - https://vuldb.com/?ctiid.314337 - https://vuldb.com/?submit.603563 - https://github.com/wwm1995/weiming_wang/blob/main/daicuocms_1.md
CVE ID: CVE-2025-6866 State: PUBLISHED Published: 2025-06-29T18:02:05.555Z Last Updated: 2025-06-30T15:34:48.737Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: code-projects Products: Simple Forum Problem Types: CWE-22 Description: A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. This vulnerability affects unknown code of the file /forum_downloadfile.php. The manipulation of the argument filename leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
sclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314338 - https://vuldb.com/?ctiid.314338 - https://vuldb.com/?submit.603581 - https://github.com/ez-lbz/poc/issues/22 - https://code-projects.org/
CVE ID: CVE-2025-6867 State: PUBLISHED Published: 2025-06-29T18:32:05.966Z Last Updated: 2025-06-30T15:33:44.656Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Simple Company Website Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Simple Company Website 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/services/manage.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314339 - https://vuldb.com/?ctiid.314339 - https://vuldb.com/?submit.603637 - https://github.com/ez-lbz/poc/issues/23 - https://www.sourcecodester.com/
CVE ID: CVE-2025-6868 State: PUBLISHED Published: 2025-06-29T19:02:06.066Z Last Updated: 2025-06-30T15:30:21.310Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Simple Company Website Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/clients/manage.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314340 - https://vuldb.com/?ctiid.314340 - https://vuldb.com/?submit.603638 - https://github.com/ez-lbz/poc/issues/24 - https://www.sourcecodester.com/
CVE ID: CVE-2025-6869 State: PUBLISHED Published: 2025-06-29T19:32:05.749Z Last Updated: 2025-06-30T20:07:51.108Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Simple Company Website Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/testimonials/manage.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichmen
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314341 - https://vuldb.com/?ctiid.314341 - https://vuldb.com/?submit.603639 - https://github.com/ez-lbz/poc/issues/25 - https://www.sourcecodester.com/
CVE ID: CVE-2025-6870 State: PUBLISHED Published: 2025-06-29T20:02:06.782Z Last Updated: 2025-06-30T20:06:21.555Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Simple Company Website Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /classes/Content.php?f=service. The manipulation of the argument img leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichmen
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314342 - https://vuldb.com/?ctiid.314342 - https://vuldb.com/?submit.603640 - https://github.com/ez-lbz/poc/issues/26 - https://www.sourcecodester.com/
CVE ID: CVE-2025-6871 State: PUBLISHED Published: 2025-06-29T20:32:05.871Z Last Updated: 2025-06-30T20:04:52.636Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Simple Company Website Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in SourceCodester Simple Company Website 1.0. This affects an unknown part of the file /classes/Login.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314343 - https://vuldb.com/?ctiid.314343 - https://vuldb.com/?submit.603641 - https://github.com/ez-lbz/poc/issues/27 - https://www.sourcecodester.com/
CVE ID: CVE-2025-6872 State: PUBLISHED Published: 2025-06-29T21:02:05.893Z Last Updated: 2025-06-30T20:03:14.914Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Simple Company Website Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical was found in SourceCodester Simple Company Website 1.0. This vulnerability affects unknown code of the file /classes/SystemSettings.php?f=update_settings. The manipulation of the argument img leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
ely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314344 - https://vuldb.com/?ctiid.314344 - https://vuldb.com/?submit.603643 - https://github.com/ez-lbz/poc/issues/28 - https://www.sourcecodester.com/
CVE ID: CVE-2025-6873 State: PUBLISHED Published: 2025-06-29T21:32:06.868Z Last Updated: 2025-06-30T18:48:54.425Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Simple Company Website Problem Types: CWE-434, CWE-284 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Simple Company Website 1.0. This issue affects some unknown processing of the file /classes/Users.php?f=save. The manipulation of the argument img leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
ely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314345 - https://vuldb.com/?ctiid.314345 - https://vuldb.com/?submit.603645 - https://github.com/ez-lbz/poc/issues/29 - https://www.sourcecodester.com/
CVE ID: CVE-2025-6874 State: PUBLISHED Published: 2025-06-29T22:02:06.603Z Last Updated: 2025-06-30T17:23:26.060Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/add_subscribe.php. The manipulation of the argument user_id/plan_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichm
k remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314346 - https://vuldb.com/?ctiid.314346 - https://vuldb.com/?submit.603651 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-15.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-6875 State: PUBLISHED Published: 2025-06-29T22:32:06.047Z Last Updated: 2025-06-30T18:44:40.564Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /panel/edit-subscription.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP
be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314347 - https://vuldb.com/?ctiid.314347 - https://vuldb.com/?submit.603652 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-16.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-6876 State: PUBLISHED Published: 2025-06-29T23:02:06.677Z Last Updated: 2025-06-30T18:37:13.367Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Best Salon Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /panel/add-category.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
ly. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314348 - https://vuldb.com/?ctiid.314348 - https://vuldb.com/?submit.603653 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-17.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-6877 State: PUBLISHED Published: 2025-06-29T23:32:06.212Z Last Updated: 2025-06-30T18:31:33.654Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /panel/edit-category.php. The manipulation of the argument editid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
y. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314349 - https://vuldb.com/?ctiid.314349 - https://vuldb.com/?submit.603654 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-18.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-6878 State: PUBLISHED Published: 2025-06-30T00:02:05.712Z Last Updated: 2025-06-30T18:27:49.116Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /panel/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichme
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314350 - https://vuldb.com/?ctiid.314350 - https://vuldb.com/?submit.603655 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-19.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-6879 State: PUBLISHED Published: 2025-06-30T00:32:06.237Z Last Updated: 2025-06-30T18:27:21.577Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /panel/add-tax.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314351 - https://vuldb.com/?ctiid.314351 - https://vuldb.com/?submit.603656 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-20.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-6880 State: PUBLISHED Published: 2025-06-30T01:02:33.533Z Last Updated: 2025-06-30T17:19:58.866Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/edit-tax.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
it has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314352 - https://vuldb.com/?ctiid.314352 - https://vuldb.com/?submit.603657 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-21.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-6881 State: PUBLISHED Published: 2025-06-30T01:32:05.807Z Last Updated: 2025-06-30T16:59:17.117Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DI-8100 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in D-Link DI-8100 16.07.21. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pppoe_base.asp of the component jhttpd. The manipulation of the argument mschap_en leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314360 - https://vuldb.com/?ctiid.314360 - https://vuldb.com/?submit.603692 - https://www.dlink.com/
CVE ID: CVE-2025-6882 State: PUBLISHED Published: 2025-06-30T02:02:05.814Z Last Updated: 2025-06-30T15:28:36.712Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-513 Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical has been found in D-Link DIR-513 1.0. This affects an unknown part of the file /goform/formSetWanPPTP. The manipulation of the argument curTime leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CIS
This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314361 - https://vuldb.com/?ctiid.314361 - https://vuldb.com/?submit.603693 - https://www.dlink.com/
CVE ID: CVE-2025-6883 State: PUBLISHED Published: 2025-06-30T02:32:05.622Z Last Updated: 2025-06-30T15:27:21.173Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Staff Audit System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in code-projects Staff Audit System 1.0. This vulnerability affects unknown code of the file /update_index.php. The manipulation of the argument updateid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314362
e public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.314362 - https://vuldb.com/?ctiid.314362 - https://vuldb.com/?submit.603719 - https://github.com/qingchuana/q1ngchuan/issues/7 - https://code-projects.org/