Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
k needs to be approached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307195 - https://vuldb.com/?ctiid.307195 - https://vuldb.com/?submit.562383 - https://github.com/handrew/browserpilot/issues/20 - https://github.com/handrew/browserpilot/issues/20#issue-2999815850
CVE ID: CVE-2025-4219 State: PUBLISHED Published: 2025-05-21T09:21:52.216Z Last Updated: 2025-05-21T10:16:20.515Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: darkyudex Products: DPEPress Problem Types: CWE-79 Description: The DPEPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dpe' shortcode in all versions up to, and including, 0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Add
ess and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ccd273dc-9de3-4863-a787-db653f2003ca?source=cve - https://plugins.trac.wordpress.org/browser/dpepress/trunk/dpepress.php#L72
CVE ID: CVE-2025-4220 State: PUBLISHED Published: 2025-05-07T01:43:10.092Z Last Updated: 2025-05-07T13:21:53.723Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: xavinnydek Products: Xavin&#039;s List Subpages Problem Types: CWE-79 Description: The Xavin&#039;s List Subpages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'xls' shortcode in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever
attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/df30f21a-cd3a-4391-9f59-81538fefabdc?source=cve - https://plugins.trac.wordpress.org/browser/xavins-list-subpages/trunk/xavins-list-subpages.php#L29
CVE ID: CVE-2025-4221 State: PUBLISHED Published: 2025-05-21T09:21:52.591Z Last Updated: 2025-05-21T10:16:10.420Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: baswaniyash Products: Animated Buttons Problem Types: CWE-79 Description: The Animated Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'auto-downloader' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a use
kers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e778399f-f7fe-47c5-9722-b833d78f475c?source=cve - https://plugins.trac.wordpress.org/browser/animated-buttons/trunk/Animated_Buttons.php#L52
CVE ID: CVE-2025-4222 State: PUBLISHED Published: 2025-05-03T01:43:08.183Z Last Updated: 2025-05-13T17:48:52.516Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: neoslab Products: Database Toolset Problem Types: CWE-200 Description: The Database Toolset plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.4 via backup files stored in a publicly accessible location. This makes it possible for unauthenticated attackers to extract sensitive data from database backup files. An index file is present, so a brute force attack would need to be successful in order to compromise any data. Additional Analyst Not
is present, so a brute force attack would need to be successful in order to compromise any data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/fa452a9a-9e26-41a1-8dea-4bafaf735bee?source=cve - https://plugins.trac.wordpress.org/browser/database-toolset/trunk/admin/class-database-toolset-backup.php#L76 - https://plugins.trac.wordpress.org/browser/database-toolset/trunk/admin/class-database-toolset-admin.php#L247 - https://www.guyshavit.com/post/cve-2025-4222
CVE ID: CVE-2025-4223 State: PUBLISHED Published: 2025-05-24T04:25:18.816Z Last Updated: 2025-05-24T09:57:51.387Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: softaculous Products: Page Builder: Pagelayer – Drag and Drop website builder Problem Types: CWE-79 Description: The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘login_url’ parameter in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfu
es it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. A valid username/password pair needs to be supplied in order to be successfully exploited and any injected scripts will only execute in the context of that authenticated user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b6db6736-4629-47b7-976a-f81335430119?source=cve - https://plugins.trac.wordpress.org/browser/pagelayer/tags/2.0.0/main/ajax.php#L1415 - https://plugins.trac.wordpress.org/changeset?new=3298138%40pagelayer%2Ftru
er/pagelayer/tags/2.0.0/main/ajax.php#L1415 - https://plugins.trac.wordpress.org/changeset?new=3298138%40pagelayer%2Ftrunk%2Fmain%2Fajax.php&old=3253356%40pagelayer%2Ftrunk%2Fmain%2Fajax.php
CVE ID: CVE-2025-4224 State: PUBLISHED Published: 2025-06-03T02:27:35.409Z Last Updated: 2025-06-03T14:50:58.032Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: gVectors Products: wpForo + wpForo Advanced Attachments Problem Types: CWE-79 Description: The wpForo + wpForo Advanced Attachments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via media upload names in all versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Custom-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an inject
om-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e634dafc-8eb0-406f-93b1-ee1d2b44171d?source=cve - https://gvectors.com/product/wpforo-advanced-attachments/#tab-changelog
CVE ID: CVE-2025-4225 State: PUBLISHED Published: 2025-08-27T19:33:45.928Z Last Updated: 2025-08-27T19:52:40.877Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: GitLab Products: GitLab Problem Types: CWE-770 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 14.1 before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that that under certain conditions could have allowed an unauthenticated attacker to cause a denial-of-service condition affecting all users by sending specially crafted GraphQL requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/538983 -
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/538983 - https://hackerone.com/reports/3100624
CVE ID: CVE-2025-4226 State: PUBLISHED Published: 2025-05-03T11:00:09.135Z Last Updated: 2025-05-30T09:10:12.356Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul, Campcodes Products: Cyber Cafe Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. This affects an unknown part of the file /add-computer.php. The manipulation of the argument compname/comploc leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
loit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307323 - https://vuldb.com/?ctiid.307323 - https://vuldb.com/?submit.562409 - https://github.com/diyuzhishen/mycve/issues/2
CVE ID: CVE-2025-4227 State: PUBLISHED Published: 2025-06-13T05:50:52.280Z Last Updated: 2025-06-23T16:06:55.397Z Vendors: Palo Alto Networks Products: GlobalProtect App Problem Types: CWE-319 Description: An improper access control vulnerability in the Endpoint Traffic Policy Enforcement https://docs.paloaltonetworks.com/globalprotect/6-0/globalprotect-app-new-features/new-features-released-in-gp-app/endpoint-traffic-policy-enforcement feature of the Palo Alto Networks GlobalProtect™ app allows certain packets to remain unencrypted instead of being properly secured within the tunnel. An attacker with physical access to the network can inject rogue devices to intercept these packets. Under n
the tunnel. An attacker with physical access to the network can inject rogue devices to intercept these packets. Under normal operating conditions, the GlobalProtect app automatically recovers from this interception within one minute. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-4227
CVE ID: CVE-2025-4228 State: PUBLISHED Published: 2025-06-12T23:41:37.071Z Last Updated: 2025-06-14T03:56:20.140Z Vendors: Palo Alto Networks Products: Cortex XDR Broker VM Problem Types: CWE-266 Description: An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex® XDR Broker VM allows an authenticated administrative user to execute certain files available within the Broker VM and escalate their privileges to root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-4228
CVE ID: CVE-2025-4229 State: PUBLISHED Published: 2025-06-13T05:42:38.482Z Last Updated: 2025-06-13T19:04:49.865Z Vendors: Palo Alto Networks Products: Cloud NGFW, PAN-OS, Prisma Access Problem Types: CWE-497 Description: An information disclosure vulnerability in the SD-WAN feature of Palo Alto Networks PAN-OS® software enables an unauthorized user to view unencrypted data sent from the firewall through the SD-WAN interface. This requires the user to be able to intercept packets sent from the firewall. Cloud NGFW and Prisma® Access are not affected by this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-4229
CVE ID: CVE-2025-4230 State: PUBLISHED Published: 2025-06-12T23:30:15.781Z Last Updated: 2025-06-13T13:32:41.271Z Vendors: Palo Alto Networks Products: Cloud NGFW, PAN-OS, Prisma Access Problem Types: CWE-78 Description: A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators. Cloud NGFW and Prisma® Access are not affected by this vulnerability. Additional A
to a limited group of administrators. Cloud NGFW and Prisma® Access are not affected by this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-4230
CVE ID: CVE-2025-4231 State: PUBLISHED Published: 2025-06-12T23:27:31.432Z Last Updated: 2025-06-13T13:32:58.253Z Vendors: Palo Alto Networks Products: Cloud NGFW, PAN-OS, Prisma Access Problem Types: CWE-77 Description: A command injection vulnerability in Palo Alto Networks PAN-OS® enables an authenticated administrative user to perform actions as the root user. The attacker must have network access to the management web interface and successfully authenticate to exploit this issue. Cloud NGFW and Prisma Access are not impacted by this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-4231
CVE ID: CVE-2025-4232 State: PUBLISHED Published: 2025-06-12T23:22:34.993Z Last Updated: 2025-06-14T03:56:19.065Z Vendors: Palo Alto Networks Products: GlobalProtect App Problem Types: CWE-155 Description: An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect™ app on macOS allows a non administrative user to escalate their privileges to root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-4232
CVE ID: CVE-2025-4233 State: PUBLISHED Published: 2025-06-12T22:14:53.314Z Last Updated: 2025-06-13T14:05:18.163Z Vendors: Palo Alto Networks Products: Prisma Access Browser Problem Types: CWE-524 Description: An insufficient implementation of cache vulnerability in Palo Alto Networks Prisma® Access Browser enables users to bypass certain data control policies. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-4233
CVE ID: CVE-2025-4234 State: PUBLISHED Published: 2025-09-12T17:18:11.618Z Last Updated: 2025-09-13T03:55:39.594Z Vendors: Palo Alto Networks Products: Cortex XDR Microsoft 365 Defender Pack Problem Types: CWE-532 Description: A problem with the Palo Alto Networks Cortex XDR Microsoft 365 Defender Pack can result in exposure of user credentials in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting purposes. This means that these credentials are exposed to recipients of the application logs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-4
logs. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-4234
CVE ID: CVE-2025-4235 State: PUBLISHED Published: 2025-09-12T17:16:53.868Z Last Updated: 2025-09-13T03:55:32.456Z Vendors: Palo Alto Networks Products: User-ID Credential Agent Problem Types: CWE-497 Description: An information exposure vulnerability in the Palo Alto Networks User-ID Credential Agent (Windows-based) can expose the service account password under specific non-default configurations. This allows an unprivileged Domain User to escalate privileges by exploiting the account’s permissions. The impact varies by configuration: * Minimally Privileged Accounts: Enable disruption of User-ID Credential Agent operations (e.g., uninstalling or disabling the agent service), weakening networ
disruption of User-ID Credential Agent operations (e.g., uninstalling or disabling the agent service), weakening network security policies that leverage Credential Phishing Prevention https://docs.paloaltonetworks.com/advanced-url-filtering/administration/url-filtering-features/credential-phishing-prevention under a Domain Credential Filter https://docs.paloaltonetworks.com/advanced-url-filtering/administration/url-filtering-features/credential-phishing-prevention/methods-to-check-for-corporate-credential-submissions configuration. * Elevated Accounts (Server Operator, Domain Join, Legacy Features): Permit increased impacts, including server control (e.g., shutdown/restart), domain manipula
ain Join, Legacy Features): Permit increased impacts, including server control (e.g., shutdown/restart), domain manipulation (e.g., rogue computer objects), and network compromise via reconnaissance or client probing. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.paloaltonetworks.com/CVE-2025-4235
CVE ID: CVE-2025-4236 State: PUBLISHED Published: 2025-05-03T14:00:05.444Z Last Updated: 2025-05-06T14:29:43.153Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this vulnerability is an unknown functionality of the component MDIR Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307327 - https://vuldb.com/?ctiid.307327
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307327 - https://vuldb.com/?ctiid.307327 - https://vuldb.com/?submit.561510 - https://fitoxs.com/exploit/exploit-900150983cd24fb0d6963f7d28e17f72.txt
CVE ID: CVE-2025-4237 State: PUBLISHED Published: 2025-05-03T15:00:06.769Z Last Updated: 2025-05-06T14:29:22.435Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this issue is some unknown functionality of the component MDELETE Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307328 - https://vuldb.com/?ctiid.307328 - https:
st Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307328 - https://vuldb.com/?ctiid.307328 - https://vuldb.com/?submit.561536 - https://fitoxs.com/exploit/exploit-c4ca4238a0b923820dcc509a6f75849b.txt
CVE ID: CVE-2025-4238 State: PUBLISHED Published: 2025-05-03T16:31:03.481Z Last Updated: 2025-05-06T14:29:03.423Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. This affects an unknown part of the component MGET Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307329 - https://vuldb.com/?ctiid.307329 - https://vuldb
s: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307329 - https://vuldb.com/?ctiid.307329 - https://vuldb.com/?submit.561561 - https://fitoxs.com/exploit/exploit-a87ff679a2f3e71d9181a67b7542122c.txt
CVE ID: CVE-2025-4239 State: PUBLISHED Published: 2025-05-03T17:00:06.214Z Last Updated: 2025-05-06T14:28:38.068Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. This vulnerability affects unknown code of the component TYPE Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307330 - https://vuldb.com/?ctiid.307330 - https://vuldb.
: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307330 - https://vuldb.com/?ctiid.307330 - https://vuldb.com/?submit.561562 - https://fitoxs.com/exploit/exploit-1679091c5a880faf6fb5e6087eb1b2dc.txt
CVE ID: CVE-2025-4240 State: PUBLISHED Published: 2025-05-03T17:31:04.032Z Last Updated: 2025-05-06T14:28:11.464Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. This issue affects some unknown processing of the component LCD Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307331 - https://vuldb.com/?ctiid.307331 - https://vuldb.c
- CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307331 - https://vuldb.com/?ctiid.307331 - https://vuldb.com/?submit.561571 - https://fitoxs.com/exploit/exploit-3c2b72a81c4f4fbe75903a2c9280d78fce69420fbc77e78ea6e73b34b735e70a.txt
CVE ID: CVE-2025-4241 State: PUBLISHED Published: 2025-05-03T18:00:10.499Z Last Updated: 2025-05-06T14:21:52.283Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Teacher Subject Allocation Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Teacher Subject Allocation Management System 1.0. Affected is an unknown function of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
he exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307332 - https://vuldb.com/?ctiid.307332 - https://vuldb.com/?submit.562452 - https://github.com/bluechips-zhao/myCVE/issues/6 - https://phpgurukul.com/
CVE ID: CVE-2025-4242 State: PUBLISHED Published: 2025-05-03T18:31:05.347Z Last Updated: 2025-05-06T14:16:48.621Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online Birth Certificate System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Online Birth Certificate System 2.0. Affected by this vulnerability is an unknown functionality of the file /admin/between-dates-report.php. The manipulation of the argument fromdate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analy
e exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307333 - https://vuldb.com/?ctiid.307333 - https://vuldb.com/?submit.562624 - https://github.com/bluechips-zhao/myCVE/issues/8 - https://phpgurukul.com/
CVE ID: CVE-2025-4243 State: PUBLISHED Published: 2025-05-03T19:00:07.012Z Last Updated: 2025-05-05T14:54:35.680Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Online Bus Reservation System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in code-projects Online Bus Reservation System 1.0. Affected by this issue is some unknown functionality of the file /print.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v