Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-4017 State: PUBLISHED Published: 2025-04-28T11:00:08.223Z Last Updated: 2025-04-28T12:09:30.135Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: 20120630 Products: Novel-Plus Problem Types: CWE-285, CWE-266 Description: A vulnerability classified as problematic was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This vulnerability affects the function list of the file nnovel-admin/src/main/java/com/java2nb/common/controller/LogController.java. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contact
e attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306370 - https://vuldb.com/?ctiid.306370 - https://vuldb.com/?submit.558376 - https://www.cnblogs.com/aibot/p/18827507
CVE ID: CVE-2025-4018 State: PUBLISHED Published: 2025-04-28T11:31:05.831Z Last Updated: 2025-04-28T12:09:41.057Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: 20120630 Products: Novel-Plus Problem Types: CWE-306, CWE-287 Description: A vulnerability, which was classified as critical, has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This issue affects the function addCrawlSource of the file novel-crawl/src/main/java/com/java2nb/novel/controller/CrawlController.java. The manipulation leads to missing authentication. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The ve
thentication. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306371 - https://vuldb.com/?ctiid.306371 - https://vuldb.com/?submit.558377 - https://www.cnblogs.com/aibot/p/18827504
CVE ID: CVE-2025-4019 State: PUBLISHED Published: 2025-04-28T12:00:08.208Z Last Updated: 2025-04-28T18:08:53.606Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: 20120630 Products: Novel-Plus Problem Types: CWE-306, CWE-287 Description: A vulnerability, which was classified as critical, was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. Affected is the function genCode of the file novel-admin/src/main/java/com/java2nb/common/controller/GeneratorController.java. The manipulation leads to missing authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early ab
nch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306372 - https://vuldb.com/?ctiid.306372 - https://vuldb.com/?submit.558360 - https://www.cnblogs.com/aibot/p/18827469
CVE ID: CVE-2025-4020 State: PUBLISHED Published: 2025-04-28T12:31:05.367Z Last Updated: 2025-04-28T18:08:45.930Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Old Age Home Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /contact.php. The manipulation of the argument fname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnr
ed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306374 - https://vuldb.com/?ctiid.306374 - https://vuldb.com/?submit.558365 - https://github.com/Q3qc1n/myCVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-4021 State: PUBLISHED Published: 2025-04-28T13:00:14.916Z Last Updated: 2025-04-28T18:08:31.889Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Patient Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Patient Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file /edit_spatient.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306375 - https://vuldb.com/?ctiid.306375 - https://vuldb.com/?submit.558402 - https://github.com/plj-sudo/cve/blob/main/README.md - https://code-projects.org/
CVE ID: CVE-2025-4022 State: PUBLISHED Published: 2025-04-28T13:31:04.218Z Last Updated: 2025-04-28T22:03:03.358Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: web-arena-x Products: webarena Problem Types: CWE-94, CWE-74 Description: A vulnerability was found in web-arena-x webarena up to 0.2.0. It has been declared as critical. This vulnerability affects the function HTMLContentEvaluator of the file webarena/evaluation_harness/evaluators.py. The manipulation of the argument target["url"] leads to code injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306376 - https://vuldb.com/?ctiid.306376 - https://vuldb.com/?submit.558415 - https://github.com/web-arena-x/webarena/issues/194 - https://github.com/web-arena-x/webarena/issues/194#issuecomment-2796165922
CVE ID: CVE-2025-4023 State: PUBLISHED Published: 2025-04-28T14:00:07.231Z Last Updated: 2025-04-28T14:13:49.216Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Placement Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in itsourcecode Placement Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /add_company.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichm
o the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306377 - https://vuldb.com/?ctiid.306377 - https://vuldb.com/?submit.558546 - https://github.com/xingyu-wu4678/cve/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-4024 State: PUBLISHED Published: 2025-04-28T14:31:05.234Z Last Updated: 2025-04-28T17:32:58.538Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Placement Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file /add_drive.php. The manipulation of the argument drive_title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichme
the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306378 - https://vuldb.com/?ctiid.306378 - https://vuldb.com/?submit.558616 - https://github.com/xingyu-wu4678/cve/issues/2 - https://itsourcecode.com/
CVE ID: CVE-2025-4025 State: PUBLISHED Published: 2025-04-28T15:00:06.532Z Last Updated: 2025-04-28T17:30:07.634Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Placement Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in itsourcecode Placement Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /registration.php. The manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP V
closed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306379 - https://vuldb.com/?ctiid.306379 - https://vuldb.com/?submit.558621 - https://github.com/xingyu-wu4678/cve/issues/3 - https://itsourcecode.com/
CVE ID: CVE-2025-4026 State: PUBLISHED Published: 2025-04-28T15:31:05.178Z Last Updated: 2025-05-05T12:33:20.758Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Nipah Virus Testing Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This issue affects some unknown processing of the file /profile.php. The manipulation of the argument adminname/mobilenumber leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
otely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306389 - https://vuldb.com/?ctiid.306389 - https://vuldb.com/?submit.558628 - https://github.com/changan520374/cve/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-4027 State: PUBLISHED Published: 2025-04-28T16:00:06.522Z Last Updated: 2025-04-28T18:02:05.232Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Old Age Home Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /admin/rules.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
closed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306390 - https://vuldb.com/?ctiid.306390 - https://vuldb.com/?submit.559159 - https://github.com/Q3qc1n/myCVE/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-4028 State: PUBLISHED Published: 2025-04-28T16:31:05.927Z Last Updated: 2025-04-28T17:57:45.833Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: COVID19 Testing Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst
exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306391 - https://vuldb.com/?ctiid.306391 - https://vuldb.com/?submit.559193 - https://github.com/JunZ-Leo/CVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-4029 State: PUBLISHED Published: 2025-04-28T17:00:06.181Z Last Updated: 2025-04-28T17:42:55.925Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Personal Diary Management System Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in code-projects Personal Diary Management System 1.0 and classified as critical. Affected by this issue is the function addrecord of the component New Record Handler. The manipulation of the argument filename leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Additional Analy
cess is required to approach this attack. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306392 - https://vuldb.com/?ctiid.306392 - https://vuldb.com/?submit.559198 - https://github.com/zzzxc643/cve/blob/main/Diary%20Management%20System%20Stack%20Buffer%20Overflow.md - https://code-projects.org/
CVE ID: CVE-2025-4030 State: PUBLISHED Published: 2025-04-28T17:31:05.190Z Last Updated: 2025-04-28T17:55:30.139Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: COVID19 Testing Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been classified as critical. This affects an unknown part of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306393 - https://vuldb.com/?ctiid.306393 - https://vuldb.com/?submit.559199 - https://github.com/JunZ-Leo/CVE/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-4031 State: PUBLISHED Published: 2025-04-28T18:00:09.390Z Last Updated: 2025-04-28T18:53:00.479Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Pre-School Enrollment System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
sed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306394 - https://vuldb.com/?ctiid.306394 - https://vuldb.com/?submit.559221 - https://github.com/tailin1122/myCVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-4032 State: PUBLISHED Published: 2025-04-28T18:31:04.567Z Last Updated: 2025-04-28T18:45:18.288Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: inclusionAI Products: AWorld Problem Types: CWE-78, CWE-77 Description: A vulnerability was found in inclusionAI AWorld up to 8c257626e648d98d793dd9a1a950c2af4dd84c4e. It has been rated as critical. This issue affects the function subprocess.run/subprocess.Popen of the file AWorld/aworld/virtual_environments/terminals/shell_tool.py. The manipulation leads to os command injection. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult
attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306395 - https://vuldb.com/?ctiid.306395 - https://vuldb.com/?submit.559222 - https://github.com/inclusionAI/AWorld/issues/38 - https://github.com/inclusionAI/AWorld/issues/38#issuecomment-2806190923 - https://github.com/inclusionAI/AWorld/issues/38#issue-2996574433
CVE ID: CVE-2025-4033 State: PUBLISHED Published: 2025-04-28T19:00:06.946Z Last Updated: 2025-04-28T19:50:50.468Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Nipah Virus Testing Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Nipah Virus Testing Management System 1.0. Affected is an unknown function of the file /patient-search-report.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306396 - https://vuldb.com/?ctiid.306396 - https://vuldb.com/?submit.559239 - https://github.com/bluechips-zhao/myCVE/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-4034 State: PUBLISHED Published: 2025-04-28T19:31:03.828Z Last Updated: 2025-04-28T21:54:07.063Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: projectworlds Products: Online Examination System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in projectworlds Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /inser_doc_process.php. The manipulation of the argument Doc_ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306397 - https://vuldb.com/?ctiid.306397 - https://vuldb.com/?submit.559297 - https://github.com/hhhanxx/attack/issues/1
CVE ID: CVE-2025-4035 State: PUBLISHED Published: 2025-04-29T12:56:22.726Z Last Updated: 2025-11-18T08:35:54.319Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-178 Description: A flaw was found in libsoup. When handling cookies, libsoup clients mistakenly allow cookies to be set for public suffix domains if the domain contains at least two components and includes an uppercase character. This bypasses public suffix protections and could allow a malicious website to set cookies for do
n uppercase character. This bypasses public suffix protections and could allow a malicious website to set cookies for domains it does not own, potentially leading to integrity issues such as session fixation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:8128 - https://access.redhat.com/security/cve/CVE-2025-4035 - https://bugzilla.redhat.com/show_bug.cgi?id=2362651
CVE ID: CVE-2025-4036 State: PUBLISHED Published: 2025-04-28T20:00:04.949Z Last Updated: 2025-04-28T21:53:22.479Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: 201206030 Products: Novel Problem Types: CWE-284, CWE-266 Description: A vulnerability was found in 201206030 Novel 3.5.0 and classified as critical. This issue affects the function updateBookChapter of the file src/main/java/io/github/xxyopen/novel/controller/author/AuthorController.java of the component Chapter Handler. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclos
emotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306401 - https://vuldb.com/?ctiid.306401 - https://vuldb.com/?submit.558414 - https://github.com/Sinon2003/cve/blob/main/novel/Novel%20%20has%20a%20logic%20authorization%20bypass%20vulnerability%20in%20AuthorController.md
CVE ID: CVE-2025-4037 State: PUBLISHED Published: 2025-04-28T20:31:04.297Z Last Updated: 2025-04-28T22:27:22.810Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: code-projects Products: ATM Banking Problem Types: CWE-840 Description: A vulnerability was found in code-projects ATM Banking 1.0. It has been classified as critical. Affected is the function moneyDeposit/moneyWithdraw. The manipulation leads to business logic errors. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306402 - https://vuldb.com/?ctiid.3
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306402 - https://vuldb.com/?ctiid.306402 - https://vuldb.com/?submit.559303 - https://github.com/zzzxc643/cve/blob/main/ATM_Banking.md - https://code-projects.org/
CVE ID: CVE-2025-4038 State: PUBLISHED Published: 2025-04-28T21:00:07.109Z Last Updated: 2025-04-28T22:26:07.592Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Train Ticket Reservation System Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in code-projects Train Ticket Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is the function Reservation of the component Ticket Reservation. The manipulation of the argument Name leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Additional Analyst
w. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306403 - https://vuldb.com/?ctiid.306403 - https://vuldb.com/?submit.559344 - https://github.com/zzzxc643/cve/blob/main/Buffer%20Overflow%20Vulnerability%20in%20Train%20Reservation%20System.md - https://code-projects.org/
CVE ID: CVE-2025-4039 State: PUBLISHED Published: 2025-04-28T21:31:05.497Z Last Updated: 2025-04-28T22:14:17.336Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Rail Pass Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/search-pass.php. The manipulation of the argument searchdata leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.306404 - https://vuldb.com/?ctiid.306404 - https://vuldb.com/?submit.559345 - https://github.com/Q3qc1n/myCVE/issues/4 - https://phpgurukul.com/