Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-7726 State: PUBLISHED Published: 2025-08-09T13:45:05.325Z Last Updated: 2025-08-11T15:52:22.432Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Dream-Theme Products: The7 — Website and eCommerce Builder for WordPress Problem Types: CWE-79 Description: The The7 theme for WordPress is vulnerable to Stored Cross-Site Scripting via its lightbox rendering code in all versions up to, and including, 12.6.0 due to insufficient input sanitization and output escaping. The theme’s JavaScript reads user-supplied 'title' and 'data-dt-img-description' attributes directly via jQuery.attr(), concatenates them into an HTML string, and inserts that string in
mg-description' attributes directly via jQuery.attr(), concatenates them into an HTML string, and inserts that string into the DOM using methods such as jQuery.html() without escaping or filtering. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5da295f3-ac54-4330-ac39-65225adeb93a?source=cve - https://themeforest.net/item/the7-responsive-multipurpose-wordpress-theme/5556590 - https://themeforest.net/item/the7-responsive-multi
orest.net/item/the7-responsive-multipurpose-wordpress-theme/5556590 - https://themeforest.net/item/the7-responsive-multipurpose-wordpress-theme/5556590#item-description__recent-updates - https://the7.io/changelog/
CVE ID: CVE-2025-7727 State: PUBLISHED Published: 2025-08-06T06:38:39.516Z Last Updated: 2025-08-07T14:12:28.874Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: jegstudio Products: Gutenverse – Ultimate Block Addons and Page Builder for Site Editor Problem Types: CWE-79 Description: The Gutenverse plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Animated Text and Fun Fact blocks in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web
s. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/76cfe806-a8d9-4249-b2d0-eb3a314ca69a?source=cve - https://wordpress.org/plugins/gutenverse/#developers - https://plugins.trac.wordpress.org/changeset/3338801/
CVE ID: CVE-2025-7728 State: PUBLISHED Published: 2025-07-17T01:14:05.511Z Last Updated: 2025-07-17T14:44:25.711Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:C) Vendors: n/a Products: Scada-LTS Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in Scada-LTS up to 2.7.8.1. Affected is an unknown function of the file users.shtm. The manipulation of the argument Username leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this issue and confirmed that it will be fixed in the upcoming release 2.8.0. Additi
he vendor was contacted early about this issue and confirmed that it will be fixed in the upcoming release 2.8.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316710 - https://vuldb.com/?ctiid.316710 - https://vuldb.com/?submit.607949 - https://github.com/CVE-Hunters/CVE/blob/main/Scada-LTS/CVE-2025-7728.md
CVE ID: CVE-2025-7729 State: PUBLISHED Published: 2025-07-17T02:02:05.740Z Last Updated: 2025-07-18T19:08:01.632Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:C) Vendors: n/a Products: Scada-LTS Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in Scada-LTS up to 2.7.8.1. Affected by this vulnerability is an unknown functionality of the file usersProfiles.shtm. The manipulation of the argument Username leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this issue and confirmed that it will be fixed in the upcoming
ic and may be used. The vendor was contacted early about this issue and confirmed that it will be fixed in the upcoming release 2.8.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316711 - https://vuldb.com/?ctiid.316711 - https://vuldb.com/?submit.607950 - https://github.com/CVE-Hunters/CVE/blob/main/Scada-LTS/CVE-2025-7729.md
CVE ID: CVE-2025-7730 State: PUBLISHED Published: 2025-10-23T22:25:22.655Z Last Updated: 2025-10-24T12:31:34.279Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: boldthemes Products: Bold Page Builder Problem Types: CWE-79 Description: The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘percentage’ parameter in all versions up to, and including, 5.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional A
bove, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/6cd5d1c7-4be2-457b-bd28-0cb76e9800e5?source=cve - https://plugins.trac.wordpress.org/browser/bold-page-builder/tags/5.4.2/content_elements/bt_bb_progress_bar/bt_bb_progress_bar.php#L90 - https://wordpress.org/plugins/bold-page-builder/#developers
CVE ID: CVE-2025-7731 State: PUBLISHED Published: 2025-09-01T03:57:49.657Z Last Updated: 2025-09-02T19:28:39.347Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Mitsubishi Electric Corporation Products: MELSEC iQ-F Series FX5U-32MT/ES, MELSEC iQ-F Series FX5U-32MT/DS, MELSEC iQ-F Series FX5U-32MT/ESS, MELSEC iQ-F Series FX5U-32MT/DSS, MELSEC iQ-F Series FX5U-32MR/ES, MELSEC iQ-F Series FX5U-32MR/DS, MELSEC iQ-F Series FX5U-64MT/ES, MELSEC iQ-F Series FX5U-64MT/DS, MELSEC iQ-F Series FX5U-64MT/ESS, MELSEC iQ-F Series FX5U-64MT/DSS, MELSEC iQ-F Series FX5U-64MR/ES, MELSEC iQ-F Series FX5U-64MR/DS, MELSEC iQ-F Series FX5U-80MT/ES, MELSEC iQ-F Series FX5U-80MT/DS
ELSEC iQ-F Series FX5S-80MT/ESS, MELSEC iQ-F Series FX5S-80MR/ES, MELSEC iQ-F Series FX5S-30MT/DS, MELSEC iQ-F Series FX5S-30MT/DSS, MELSEC iQ-F Series FX5S-30MR/DS, MELSEC iQ-F Series FX5S-40MT/DS, MELSEC iQ-F Series FX5S-40MT/DSS, MELSEC iQ-F Series FX5S-40MR/DS, MELSEC iQ-F Series FX5S-60MT/DS, MELSEC iQ-F Series FX5S-60MT/DSS, MELSEC iQ-F Series FX5S-60MR/DS, MELSEC iQ-F Series FX5S-80MT/DS, MELSEC iQ-F Series FX5S-80MT/DSS, MELSEC iQ-F Series FX5S-80MR/DS Problem Types: CWE-319 Description: Cleartext Transmission of Sensitive Information vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to obtain credential informatio
ctric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to obtain credential information by intercepting SLMP communication messages, and read or write the device values of the product and stop the operations of programs by using the obtained credential information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-012_en.pdf - https://jvn.jp/vu/JVNVU90041458/ - https://www.cisa.gov/news-events/ics-advisories/icsa-25-240-02
CVE ID: CVE-2025-7732 State: PUBLISHED Published: 2025-08-27T01:46:48.673Z Last Updated: 2025-08-27T14:09:12.900Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: kevinweber Products: Lazy Load for Videos Problem Types: CWE-79 Description: The Lazy Load for Videos plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its lazy‑loading handlers in all versions up to, and including, 2.18.7 due to insufficient input sanitization and output escaping. The plugin’s JavaScript registration handlers read the client‑supplied 'data-video-title' and 'href' attributes, decode HTML entities by default, and pass them directly into DOM sinks without any escap
o-title' and 'href' attributes, decode HTML entities by default, and pass them directly into DOM sinks without any escaping or validation. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9d28bd7d-ad3f-4720-9e09-466169fc672b?source=cve - https://plugins.trac.wordpress.org/browser/lazy-load-for-videos/trunk/public/js/lazyload-youtube.js - https://plugins.trac.wordpress.org/browser/lazy-load-for-videos/trunk/public/js/lazyload-vi
lic/js/lazyload-youtube.js - https://plugins.trac.wordpress.org/browser/lazy-load-for-videos/trunk/public/js/lazyload-vimeo.js - https://wordpress.org/plugins/lazy-load-for-videos/#developers - https://plugins.trac.wordpress.org/changeset/3348894
CVE ID: CVE-2025-7734 State: PUBLISHED Published: 2025-08-13T17:26:20.482Z Last Updated: 2025-08-13T20:35:29.997Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-79 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 14.2 before 18.0.6, 18.1 before 18.1.4 and 18.2 before 18.2.2 that, under certain conditions, could have allowed a successful attacker to execute actions on behalf of users by injecting malicious content. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/556090 - https://hackerone.com/reports/3247096
CVE ID: CVE-2025-7735 State: PUBLISHED Published: 2025-07-17T03:20:58.284Z Last Updated: 2025-07-21T01:23:54.393Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: UNIMAX Products: Hospital Information System Problem Types: CWE-89 Description: The Hospital Information System developed by UNIMAX has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.twcert.org.tw/tw/cp-132-10248-f429e-1.html - https://www.twcert.org.tw/en/cp-139-10249-5d48c-2.html
CVE ID: CVE-2025-7736 State: PUBLISHED Published: 2025-11-15T08:04:14.734Z Last Updated: 2025-11-17T20:13:18.378Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-863 Description: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.9 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to bypass access control restrictions and view GitLab Pages content intended only for project members by authenticating through OAuth providers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/releases/2025/11/12/patc
ders. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/ - https://gitlab.com/gitlab-org/gitlab/-/issues/556098 - https://hackerone.com/reports/3250156
CVE ID: CVE-2025-7738 State: PUBLISHED Published: 2025-07-31T14:12:02.648Z Last Updated: 2025-11-20T20:59:37.862Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9 Problem Types: CWE-312 Description: A flaw was found in Ansible Automation Platform (AAP) where the Gateway API returns the client secret for certain GitHub Enterprise authenticators in clear text. This vulnerability affects administrators or auditors accessing authenticator configurations. While access is limited to privileged users, the clear text exposure of sensitive credentia
uthenticator configurations. While access is limited to privileged users, the clear text exposure of sensitive credentials increases the risk of accidental leaks or misuse. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:12772 - https://access.redhat.com/security/cve/CVE-2025-7738 - https://bugzilla.redhat.com/show_bug.cgi?id=2381589
CVE ID: CVE-2025-7739 State: PUBLISHED Published: 2025-08-13T17:26:25.490Z Last Updated: 2025-08-13T20:36:20.769Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-79 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 18.2 before 18.2.2 that, under certain conditions, could have allowed authenticated users to achieve stored cross-site scripting by injecting malicious HTML content in scoped label descriptions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/556111 - https://hackerone.com/reports/3255849
CVE ID: CVE-2025-7742 State: PUBLISHED Published: 2025-07-24T23:28:32.443Z Last Updated: 2025-07-25T17:33:14.255Z Vendors: LG Innotek Products: Camera Model LNV5110R Problem Types: CWE-288 Description: An authentication vulnerability exists in the LG Innotek camera model LNV5110R firmware that allows a malicious actor to upload an HTTP POST request to the devices non-volatile storage. This action may result in remote code execution that allows an attacker to run arbitrary commands on the target device at the administrator privilege level. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-205-04
CVE ID: CVE-2025-7743 State: PUBLISHED Published: 2025-09-16T11:52:39.118Z Last Updated: 2025-09-16T19:31:38.633Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Dolusoft Products: Omaspot Problem Types: CWE-319 Description: Cleartext Transmission of Sensitive Information vulnerability in Dolusoft Omaspot allows Interception, Privilege Escalation.This issue affects Omaspot: before 12.09.2025. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0254
CVE ID: CVE-2025-7744 State: PUBLISHED Published: 2025-09-16T11:50:19.554Z Last Updated: 2025-09-16T19:31:14.045Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dolusoft Products: Omaspot Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dolusoft Omaspot allows SQL Injection.This issue affects Omaspot: before 12.09.2025. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0254
CVE ID: CVE-2025-7745 State: PUBLISHED Published: 2025-07-24T07:09:11.906Z Last Updated: 2025-07-24T13:17:47.983Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: ABB Products: AC500 V2 Problem Types: CWE-126 Description: Buffer Over-read vulnerability in ABB AC500 V2.This issue affects AC500 V2: through 2.5.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://search.abb.com/library/Download.aspx?DocumentID=3ADR011432&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2025-7746 State: PUBLISHED Published: 2025-09-09T21:02:08.936Z Last Updated: 2025-11-03T18:14:06.463Z Vendors: Schneider Electric Products: ATV630/650/660/680/6A0/6B0/6L0 Altivar Process Drives, ATV930/950/955/960/980/9A0/9B0/9L0/991/992/993 Altivar Process Drives, ILC992 InterLink Converter, ATV340E Altivar Machine Drives, ATV6000 Medium Voltage Altivar Process Drives, ATS490 Altivar Soft Starter, VW3A3720 & VW3A3721 Altivar Process Communication Modules, VW3A3530D: ATVdPAC module Problem Types: CWE-79 Description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause an unvalidated data injected by a m
g Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause an unvalidated data injected by a malicious user potentially leading to modify or read data in a victim’s browser. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-252-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-252-01.pdf
CVE ID: CVE-2025-7747 State: PUBLISHED Published: 2025-07-17T17:14:09.386Z Last Updated: 2025-07-17T19:14:07.071Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH451 Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. This affects the function fromWizardHandle of the file /goform/WizardHandle of the component POST Request Handler. The manipulation of the argument PPW leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
en disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316737 - https://vuldb.com/?ctiid.316737 - https://vuldb.com/?submit.615487 - https://github.com/zezhifu1/cve_report/blob/main/FH451/fromWizardHandle.md - https://github.com/zezhifu1/cve_report/blob/main/FH451/fromWizardHandle.md#payload - https://www.tenda.com.cn/
CVE ID: CVE-2025-7748 State: PUBLISHED Published: 2025-07-17T17:32:06.646Z Last Updated: 2025-07-17T19:13:58.471Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: n/a Products: ZCMS Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in ZCMS 3.6.0. This vulnerability affects unknown code of the component Create Article Page. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316738 - https://vuldb.com/?ctiid.316738 - ht
nalyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316738 - https://vuldb.com/?ctiid.316738 - https://vuldb.com/?submit.615488 - https://github.com/falling-snow1/CVE2/
CVE ID: CVE-2025-7749 State: PUBLISHED Published: 2025-07-17T18:02:05.938Z Last Updated: 2025-07-17T20:23:58.963Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Appointment Booking System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in code-projects Online Appointment Booking System 1.0. This issue affects some unknown processing of the file /admin/getmanagerregion.php. The manipulation of the argument city leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP V
initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316739 - https://vuldb.com/?ctiid.316739 - https://vuldb.com/?submit.615489 - https://github.com/zzb1388/cve/issues/27 - https://code-projects.org/
CVE ID: CVE-2025-7750 State: PUBLISHED Published: 2025-07-17T19:02:05.827Z Last Updated: 2025-07-17T20:30:06.506Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Appointment Booking System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in code-projects Online Appointment Booking System 1.0. Affected is an unknown function of the file /admin/adddoctorclinic.php. The manipulation of the argument clinic leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrich
ck remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316740 - https://vuldb.com/?ctiid.316740 - https://vuldb.com/?submit.615490 - https://github.com/zzb1388/cve/issues/26 - https://code-projects.org/
CVE ID: CVE-2025-7751 State: PUBLISHED Published: 2025-07-17T19:14:06.320Z Last Updated: 2025-07-17T20:37:57.534Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Appointment Booking System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/addclinic.php. The manipulation of the argument cid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vu
launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316741 - https://vuldb.com/?ctiid.316741 - https://vuldb.com/?submit.615492 - https://github.com/zzb1388/cve/issues/24 - https://code-projects.org/
CVE ID: CVE-2025-7752 State: PUBLISHED Published: 2025-07-17T19:32:05.716Z Last Updated: 2025-07-17T20:11:51.341Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Appointment Booking System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/deletedoctor.php. The manipulation of the argument did leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichme
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316742 - https://vuldb.com/?ctiid.316742 - https://vuldb.com/?submit.615493 - https://github.com/zzb1388/cve/issues/23 - https://code-projects.org/
CVE ID: CVE-2025-7753 State: PUBLISHED Published: 2025-07-17T19:44:06.206Z Last Updated: 2025-07-17T20:08:56.917Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Appointment Booking System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Online Appointment Booking System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/adddoctor.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment
emotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316743 - https://vuldb.com/?ctiid.316743 - https://vuldb.com/?submit.615494 - https://github.com/zzb1388/cve/issues/22 - https://code-projects.org/