Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-7135 State: PUBLISHED Published: 2025-07-07T16:02:06.406Z Last Updated: 2025-07-08T13:49:57.009Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Recruitment Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in Campcodes Online Recruitment Management System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=save_vacancy. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA A
be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315047 - https://vuldb.com/?ctiid.315047 - https://vuldb.com/?submit.605953 - https://github.com/wyl091256/CVE/issues/22 - https://www.campcodes.com/
CVE ID: CVE-2025-7136 State: PUBLISHED Published: 2025-07-07T16:32:05.656Z Last Updated: 2025-07-07T20:47:49.561Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Recruitment Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in Campcodes Online Recruitment Management System 1.0. Affected is an unknown function of the file /admin/view_vacancy.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
ly. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315048 - https://vuldb.com/?ctiid.315048 - https://vuldb.com/?submit.605954 - https://github.com/wyl091256/CVE/issues/23 - https://www.campcodes.com/
CVE ID: CVE-2025-7137 State: PUBLISHED Published: 2025-07-07T17:02:06.425Z Last Updated: 2025-07-07T17:57:31.994Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /panel/schedule-staff.php. The manipulation of the argument staff_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: R
tely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315051 - https://vuldb.com/?ctiid.315051 - https://vuldb.com/?submit.605984 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-22.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-7138 State: PUBLISHED Published: 2025-07-07T17:32:06.418Z Last Updated: 2025-07-07T17:45:45.443Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /panel/admin-profile.php. The manipulation of the argument adminname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
ely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315052 - https://vuldb.com/?ctiid.315052 - https://vuldb.com/?submit.605985 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-23.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-7139 State: PUBLISHED Published: 2025-07-07T18:02:06.780Z Last Updated: 2025-07-07T18:28:09.107Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /panel/edit-customer-detailed.php of the component Update Customer Details Page. The manipulation of the argument Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be
s to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315053 - https://vuldb.com/?ctiid.315053 - https://vuldb.com/?submit.605986 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/xss-1.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-7140 State: PUBLISHED Published: 2025-07-07T18:32:06.499Z Last Updated: 2025-07-08T17:36:04.774Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/edit-staff.php of the component Update Staff Page. The manipulation of the argument Staff Name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analy
s possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315054 - https://vuldb.com/?ctiid.315054 - https://vuldb.com/?submit.605987 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/xss-2.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-7141 State: PUBLISHED Published: 2025-07-07T19:02:05.791Z Last Updated: 2025-07-07T20:50:46.358Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in SourceCodester Best Salon Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /panel/edit_plan.php of the component Update Staff Page. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CIS
can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315055 - https://vuldb.com/?ctiid.315055 - https://vuldb.com/?submit.605988 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/xss-3.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-7142 State: PUBLISHED Published: 2025-07-07T19:32:05.870Z Last Updated: 2025-07-07T20:54:04.667Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in SourceCodester Best Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /panel/search-appointment.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichm
d remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315056 - https://vuldb.com/?ctiid.315056 - https://vuldb.com/?submit.605989 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/xss-4.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-7143 State: PUBLISHED Published: 2025-07-07T20:02:06.460Z Last Updated: 2025-07-07T20:56:08.923Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/edit-tax.php of the component Update Tax Page. The manipulation of the argument Tax Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analy
possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315057 - https://vuldb.com/?ctiid.315057 - https://vuldb.com/?submit.605990 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/xss-5.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-7144 State: PUBLISHED Published: 2025-07-07T20:32:06.290Z Last Updated: 2025-07-07T20:56:47.976Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Best Salon Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /panel/admin-profile.php of the component Admin Profile Page. The manipulation of the argument Admin Name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Addition
scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315058 - https://vuldb.com/?ctiid.315058 - https://vuldb.com/?submit.605991 - https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/xss-6.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-7145 State: PUBLISHED Published: 2025-07-07T02:14:34.422Z Last Updated: 2025-07-07T15:35:58.290Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: TeamT5 Products: ThreatSonar Anti-Ransomware Problem Types: CWE-78 Description: ThreatSonar Anti-Ransomware developed by TeamT5 has an OS Command Injection vulnerability, allowing remote attackers with product platform intermediate privileges to inject arbitrary OS commands and execute them on the server, thereby gaining administrative access to the remote host. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-10231-a15c8-1.html - https://www.twcert.
tes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-10231-a15c8-1.html - https://www.twcert.org.tw/en/cp-139-10232-f99c0-2.html
CVE ID: CVE-2025-7146 State: PUBLISHED Published: 2025-07-08T01:19:16.521Z Last Updated: 2025-07-08T14:05:31.209Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Jhenggao Products: iPublish System Problem Types: CWE-23 Description: The iPublish System developed by Jhenggao has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to read arbitrary system file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-10233-45fc8-1.html - https://www.twcert.org.tw/en/cp-139-10234-38665-2.html
CVE ID: CVE-2025-7147 State: PUBLISHED Published: 2025-07-07T21:02:06.728Z Last Updated: 2025-07-08T14:08:42.077Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: CodeAstro Products: Patient Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in CodeAstro Patient Record Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refere
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315085 - https://vuldb.com/?ctiid.315085 - https://vuldb.com/?submit.606026 - https://github.com/Vanshdhawan188/Patient-Record-Management-System-SQL/blob/main/Patient%20Record%20Management%20System.md - https://codeastro.com/
CVE ID: CVE-2025-7148 State: PUBLISHED Published: 2025-07-07T21:32:06.357Z Last Updated: 2025-07-08T14:07:01.835Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: CodeAstro Products: Simple Hospital Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in CodeAstro Simple Hospital Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /patient.html of the component POST Parameter Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected
e launched remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315086 - https://vuldb.com/?ctiid.315086 - https://vuldb.com/?submit.606043 - https://github.com/Vanshdhawan188/Simple-Hospital-Management-System-in-Python-CodeAstro-Patients-Stored-XSS/blob/main/Simple%20Hospital%20Management%20System%20in%20Python%20CodeAstro%20Patients%20Stored%20XSS.md - https://codeastro.com/
CVE ID: CVE-2025-7149 State: PUBLISHED Published: 2025-07-07T22:02:06.966Z Last Updated: 2025-07-08T17:35:30.787Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Advanced Online Voting System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/candidates_delete.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
xploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315087 - https://vuldb.com/?ctiid.315087 - https://vuldb.com/?submit.606214 - https://github.com/y2xsec324/cve/issues/4 - https://www.campcodes.com/
CVE ID: CVE-2025-7150 State: PUBLISHED Published: 2025-07-07T22:32:06.028Z Last Updated: 2025-07-08T17:35:25.231Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Advanced Online Voting System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/voters_delete.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315088 - https://vuldb.com/?ctiid.315088 - https://vuldb.com/?submit.606219 - https://github.com/y2xsec324/cve/issues/5 - https://www.campcodes.com/
CVE ID: CVE-2025-7151 State: PUBLISHED Published: 2025-07-07T23:02:07.400Z Last Updated: 2025-07-08T17:35:20.042Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Advanced Online Voting System Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/voters_add.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
e exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315089 - https://vuldb.com/?ctiid.315089 - https://vuldb.com/?submit.606224 - https://github.com/y2xsec324/cve/issues/7 - https://www.campcodes.com/
CVE ID: CVE-2025-7152 State: PUBLISHED Published: 2025-07-07T23:32:05.801Z Last Updated: 2025-07-08T17:35:14.257Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Advanced Online Voting System Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical has been found in Campcodes Advanced Online Voting System 1.0. Affected is an unknown function of the file /admin/candidates_add.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315090 - https://vuldb.com/?ctiid.315090 - https://vuldb.com/?submit.606226 - https://github.com/y2xsec324/cve/issues/8 - https://www.campcodes.com/
CVE ID: CVE-2025-7153 State: PUBLISHED Published: 2025-07-08T00:02:05.777Z Last Updated: 2025-07-08T17:35:02.820Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: CodeAstro Products: Simple Hospital Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in CodeAstro Simple Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /doctor.html of the component POST Parameter Handler. The manipulation of the argument First Name/Last name/Address leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may
eads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315091 - https://vuldb.com/?ctiid.315091 - https://vuldb.com/?submit.606216 - https://github.com/Vanshdhawan188/Simple-Hospital-Management-System-in-Python-CodeAstro-Patients-Stored-XSS-Doctors-Page/blob/main/Simple-Hospital-Management-System-in-Python-CodeAstro-Patients-Stored-XSS-Doctors%20Page.md - https://codeastro.com/
CVE ID: CVE-2025-7154 State: PUBLISHED Published: 2025-07-08T00:32:07.691Z Last Updated: 2025-07-08T16:14:52.767Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: N200RE Problem Types: CWE-78, CWE-77 Description: A vulnerability, which was classified as critical, has been found in TOTOLINK N200RE 9.3.5u.6095_B20200916/9.3.5u.6139_B20201216. Affected by this issue is the function sub_41A0F8 of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Hostname leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: R
tely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315092 - https://vuldb.com/?ctiid.315092 - https://vuldb.com/?submit.606230 - https://github.com/FLY200503/IoT-vul/blob/master/Totolink/N200RE/README.md - https://www.totolink.net/
CVE ID: CVE-2025-7155 State: PUBLISHED Published: 2025-07-08T01:03:15.619Z Last Updated: 2025-07-08T16:13:07.620Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Online Notes Sharing System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Online Notes Sharing System 1.0. This affects an unknown part of the file /Dashboard of the component Cookie Handler. The manipulation of the argument sessionid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The original researcher disclosure suspects a
ck remotely. The exploit has been disclosed to the public and may be used. The original researcher disclosure suspects an XPath Injection vulnerability; however, the provided attack payload appears to be characteristic of an SQL Injection attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315093 - https://vuldb.com/?ctiid.315093 - https://vuldb.com/?submit.606281 - https://github.com/Vanshdhawan188/Online-Notes-Sharing-System-Php-Gurukul-Python/blob/main/Online-Notes-Sharing-System-Php-Gurukul-Python-Xpath-Injection.md - https://github.com/Vanshdhawan188/Online-Notes-Sharing-System-Php-Gurukul-Python/blob/main/Online-Notes-Sharing-System-Php-Guruku
ithub.com/Vanshdhawan188/Online-Notes-Sharing-System-Php-Gurukul-Python/blob/main/Online-Notes-Sharing-System-Php-Gurukul-Python-Xpath-Injection.md#-step-by-step-exploitation-poc - https://phpgurukul.com/
CVE ID: CVE-2025-7156 State: PUBLISHED Published: 2025-07-08T01:32:07.956Z Last Updated: 2025-07-08T14:04:09.437Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: hitsz-ids Products: airda Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in hitsz-ids airda 0.0.3 and classified as critical. This vulnerability affects the function execute of the file /v1/chat/completions. The manipulation of the argument question leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315094 - https://vu
may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315094 - https://vuldb.com/?ctiid.315094 - https://vuldb.com/?submit.606352 - https://www.cnblogs.com/aibot/p/18956966
CVE ID: CVE-2025-7157 State: PUBLISHED Published: 2025-07-08T02:02:05.847Z Last Updated: 2025-07-08T13:46:51.721Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Note Sharing Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Online Note Sharing 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.315096 - https://vuldb.com/?ctiid.315096 - https://vuldb.com/?submit.606355 - https://github.com/yihaofuweng/cve/issues/3 - https://code-projects.org/