Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-11408 State: PUBLISHED Published: 2025-10-07T20:32:05.695Z Last Updated: 2025-10-08T18:32:02.359Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DI-7001 MINI Problem Types: CWE-120, CWE-119 Description: A security vulnerability has been detected in D-Link DI-7001 MINI 24.04.18B1. The affected element is an unknown function of the file /dbsrv.asp. Such manipulation of the argument str leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327345 - https://vuldb.com/?ctiid.327345 -
l Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327345 - https://vuldb.com/?ctiid.327345 - https://vuldb.com/?submit.665474 - https://github.com/DavCloudz/cve/issues/5 - https://www.dlink.com/
CVE ID: CVE-2025-11409 State: PUBLISHED Published: 2025-10-07T21:02:06.709Z Last Updated: 2025-10-08T18:24:15.464Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Advanced Online Voting Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /index.php. Performing manipulation of the argument voter results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
loit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327346 - https://vuldb.com/?ctiid.327346 - https://vuldb.com/?submit.665542 - https://github.com/hbesljx/vul/issues/2 - https://www.campcodes.com/
CVE ID: CVE-2025-11410 State: PUBLISHED Published: 2025-10-07T21:32:08.364Z Last Updated: 2025-10-08T17:35:11.962Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Advanced Online Voting Management System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in Campcodes Advanced Online Voting Management System 1.0. This affects an unknown function of the file /admin/voters_add.php. Executing manipulation of the argument firstname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichmen
published and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327347 - https://vuldb.com/?ctiid.327347 - https://vuldb.com/?submit.665586 - https://github.com/hbesljx/vul/issues/3 - https://www.campcodes.com/
CVE ID: CVE-2025-11411 State: PUBLISHED Published: 2025-10-22T12:28:02.607Z Last Updated: 2025-11-06T00:12:30.273Z Vendors: NLnet Labs Products: Unbound Problem Types: CWE-349 Description: NLnet Labs Unbound up to and including version 1.24.0 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are used to update the resolver's knowledge of the zone's name servers. A malicious actor can exploit the possible poisonous effect by injecting NS RRSets (and possibly their respective address records) in a reply. This
it the possible poisonous effect by injecting NS RRSets (and possibly their respective address records) in a reply. This could be done for example by trying to spoof a packet or fragmentation attacks. Unbound would then proceed to update the NS RRSet data it already has since the new data has enough trust for it, i.e., in-zone data for the delegation point. Unbound 1.24.1 includes a fix that scrubs unsolicited NS RRSets (and their respective address records) from replies mitigating the possible poison effect. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.nlnetlabs.nl/downloads/unbound/CVE-2025-11411.txt
CVE ID: CVE-2025-11412 State: PUBLISHED Published: 2025-10-07T22:02:08.093Z Last Updated: 2025-10-08T17:34:56.284Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: GNU Products: Binutils Problem Types: CWE-125, CWE-119 Description: A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of the file bfd/elflink.c of the component Linker. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of the patch is 047435dd988a3975d40c6626a8f739a0b2e154bc. To fix this issue, it is recommended
be used. The identifier of the patch is 047435dd988a3975d40c6626a8f739a0b2e154bc. To fix this issue, it is recommended to deploy a patch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327348 - https://vuldb.com/?ctiid.327348 - https://sourceware.org/bugzilla/show_bug.cgi?id=33452 - https://sourceware.org/bugzilla/show_bug.cgi?id=33452#c8 - https://sourceware.org/bugzilla/attachment.cgi?id=16378 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=047435dd988a3975d40c6626a8f739a0b2e154bc - https://www.gnu.org/
CVE ID: CVE-2025-11413 State: PUBLISHED Published: 2025-10-07T22:02:12.368Z Last Updated: 2025-10-08T17:34:48.460Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: GNU Products: Binutils Problem Types: CWE-125, CWE-119 Description: A vulnerability was found in GNU Binutils 2.45. Affected is the function elf_link_add_object_symbols of the file bfd/elflink.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. Upgrading to version 2.46 is able to address this issue. The patch is identified as 72efdf166aa0ed72ecc69fc2349af6591a7a19c0. Upg
to version 2.46 is able to address this issue. The patch is identified as 72efdf166aa0ed72ecc69fc2349af6591a7a19c0. Upgrading the affected component is advised. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327349 - https://vuldb.com/?ctiid.327349 - https://vuldb.com/?submit.665587 - https://sourceware.org/bugzilla/show_bug.cgi?id=33452 - https://sourceware.org/bugzilla/show_bug.cgi?id=33456#c10 - https://sourceware.org/bugzilla/attachment.cgi?id=16362 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=72efdf166aa0ed72ecc69fc2349af6591a7a19c0 - https://www.gnu.org/
CVE ID: CVE-2025-11414 State: PUBLISHED Published: 2025-10-07T22:32:07.740Z Last Updated: 2025-10-08T17:34:42.195Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: GNU Products: Binutils Problem Types: CWE-125, CWE-119 Description: A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.46 addresses this issue. Patch name: aeaaa9af6359c8e394ce9cf24911fec4f4d23703. It i
be utilized. Upgrading to version 2.46 addresses this issue. Patch name: aeaaa9af6359c8e394ce9cf24911fec4f4d23703. It is advisable to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327350 - https://vuldb.com/?ctiid.327350 - https://vuldb.com/?submit.665591 - https://sourceware.org/bugzilla/show_bug.cgi?id=33450 - https://sourceware.org/bugzilla/attachment.cgi?id=16361 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=aeaaa9af6359c8e394ce9cf24911fec4f4d23703 - https://www.gnu.org/
CVE ID: CVE-2025-11415 State: PUBLISHED Published: 2025-10-07T23:02:07.436Z Last Updated: 2025-10-08T17:34:33.397Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Beauty Parlour Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknown functionality of the file /admin/customer-list.php. Such manipulation of the argument delid leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
xploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327351 - https://vuldb.com/?ctiid.327351 - https://vuldb.com/?submit.665594 - https://github.com/f000x0/cve/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-11416 State: PUBLISHED Published: 2025-10-07T23:02:10.983Z Last Updated: 2025-10-08T15:43:45.561Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Beauty Parlour Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/invoices.php. Performing manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327352 - https://vuldb.com/?ctiid.327352 - https://vuldb.com/?submit.665596 - https://github.com/f000x0/cve/issues/4 - https://phpgurukul.com/
CVE ID: CVE-2025-11417 State: PUBLISHED Published: 2025-10-07T23:32:06.135Z Last Updated: 2025-10-08T18:22:39.258Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Advanced Online Voting Management System Problem Types: CWE-434, CWE-284 Description: A weakness has been identified in Campcodes Advanced Online Voting Management System 1.0. This vulnerability affects unknown code of the file /admin/voters_add.php. Executing manipulation of the argument photo can lead to unrestricted upload. The attack can be launched remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichm
The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327353 - https://vuldb.com/?ctiid.327353 - https://vuldb.com/?submit.665597 - https://github.com/hbesljx/vul/issues/4 - https://www.campcodes.com/
CVE ID: CVE-2025-11418 State: PUBLISHED Published: 2025-10-08T00:02:07.614Z Last Updated: 2025-10-08T19:13:57.526Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: CH22 Problem Types: CWE-121, CWE-119 Description: A security vulnerability has been detected in Tenda CH22 up to 1.0.0.1. This issue affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component HTTP Request Handler. The manipulation of the argument mit_ssid_index leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
e exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327354 - https://vuldb.com/?ctiid.327354 - https://vuldb.com/?submit.665615 - https://github.com/Sxxxw/cve/issues/2 - https://www.tenda.com.cn/
CVE ID: CVE-2025-11420 State: PUBLISHED Published: 2025-10-08T00:32:05.465Z Last Updated: 2025-10-08T19:11:20.376Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: E-Commerce Website Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/edit_order_details.php. The manipulation of the argument order_id results in sql injection. The attack may be launched remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327355 - https://vuldb.com/?ctiid.327355
nal Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327355 - https://vuldb.com/?ctiid.327355 - https://vuldb.com/?submit.665770 - https://github.com/ashin9/CVE/issues/3 - https://code-projects.org/
CVE ID: CVE-2025-11421 State: PUBLISHED Published: 2025-10-08T01:02:06.070Z Last Updated: 2025-10-08T18:18:39.635Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Voting System Problem Types: CWE-79, CWE-94 Description: A flaw has been found in code-projects Voting System 1.0. The affected element is an unknown function of the file /admin/candidates_edit.php. This manipulation of the argument Firstname/Lastname/Platform causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327356 - htt
hed and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327356 - https://vuldb.com/?ctiid.327356 - https://vuldb.com/?submit.665811 - https://github.com/underatted/CVE/issues/10 - https://code-projects.org/
CVE ID: CVE-2025-11422 State: PUBLISHED Published: 2025-10-08T01:32:06.033Z Last Updated: 2025-10-08T17:54:54.803Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Advanced Online Voting Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /admin/login.php. Such manipulation of the argument Username leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
s been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327357 - https://vuldb.com/?ctiid.327357 - https://vuldb.com/?submit.665949 - https://github.com/hbesljx/vul/issues/5 - https://www.campcodes.com/
CVE ID: CVE-2025-11423 State: PUBLISHED Published: 2025-10-08T02:02:06.119Z Last Updated: 2025-10-08T17:51:58.502Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: CH22 Problem Types: CWE-119 Description: A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function formSafeEmailFilter of the file /goform/SafeEmailFilter. Performing manipulation of the argument page results in memory corruption. The attack is possible to be carried out remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327358 - https://vuldb.com/?ctiid.327358 - https://vu
otes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327358 - https://vuldb.com/?ctiid.327358 - https://vuldb.com/?submit.666009 - https://github.com/f000x0/cve/issues/7 - https://www.tenda.com.cn/
CVE ID: CVE-2025-11424 State: PUBLISHED Published: 2025-10-08T02:02:09.166Z Last Updated: 2025-10-08T17:34:27.604Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Web-Based Inventory and POS System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function of the file /login.php. Executing manipulation of the argument emailid can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
licly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327359 - https://vuldb.com/?ctiid.327359 - https://vuldb.com/?submit.666209 - https://github.com/Real-Rio/vulnreport/blob/main/SQL6.md - https://code-projects.org/
CVE ID: CVE-2025-11425 State: PUBLISHED Published: 2025-10-08T02:32:05.309Z Last Updated: 2025-10-08T14:33:46.738Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: projectworlds Products: Advanced Library Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Affected is an unknown function of the file /edit_admin.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP
s publicly available and might be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327360 - https://vuldb.com/?ctiid.327360 - https://vuldb.com/?submit.666213 - https://github.com/ChenGuangHuangHun/CVE/issues/2
CVE ID: CVE-2025-11426 State: PUBLISHED Published: 2025-10-08T03:02:05.413Z Last Updated: 2025-10-08T14:33:06.688Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: projectworlds Products: Advanced Library Management System Problem Types: CWE-434, CWE-284 Description: A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit_book.php. The manipulation of the argument image results in unrestricted upload. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vu
tack remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327361 - https://vuldb.com/?ctiid.327361 - https://vuldb.com/?submit.666228 - https://github.com/ChenGuangHuangHun/CVE/issues/3
CVE ID: CVE-2025-11427 State: PUBLISHED Published: 2025-11-18T11:00:48.436Z Last Updated: 2025-11-18T20:50:27.147Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: wpengine Products: WP Migrate Lite – WordPress Migration Made Easy Problem Types: CWE-918 Description: The WP Migrate Lite – WordPress Migration Made Easy plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.7.6 via the wpmdb_flush AJAX action. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to obtain information about internal services. Ad
bitrary locations originating from the web application and can be used to obtain information about internal services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4b098711-ed01-4a71-b0df-30ff4fffa930?source=cve - https://plugins.trac.wordpress.org/browser/wp-migrate-db/tags/2.7.5/class/Common/MigrationPersistence/Persistence.php#L50 - https://plugins.trac.wordpress.org/browser/wp-migrate-db/tags/2.7.5/class/Common/Migration/Flush.php#L69
CVE ID: CVE-2025-11428 State: REJECTED Published: N/A Last Updated: 2025-10-29T22:19:16.982Z Description: No description available.
CVE ID: CVE-2025-11429 State: PUBLISHED Published: 2025-10-23T14:09:31.901Z Last Updated: 2025-11-12T20:10:58.773Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: Red Hat Products: Red Hat Build of Keycloak Problem Types: CWE-613 Description: A flaw was found in Keycloak. Keycloak does not immediately enforce the disabling of the "Remember Me" realm setting on existing user sessions. Sessions created while "Remember Me" was active retain their extended session lifetime until they expire, overriding the administrator's recent security configuration change. This is a logic flaw in session management increases the potential window for successful session hijacki
uration change. This is a logic flaw in session management increases the potential window for successful session hijacking or unauthorized long-term access persistence. The flaw lies in the session expiration logic relying on the session-local "remember-me" flag without validating the current realm-level configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-11429 - https://bugzilla.redhat.com/show_bug.cgi?id=2402148
CVE ID: CVE-2025-11430 State: PUBLISHED Published: 2025-10-08T03:32:06.227Z Last Updated: 2025-10-08T14:19:10.813Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Simple E-Commerce Bookstore Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /cart.php. The manipulation of the argument remove results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327367 - https://vuldb.c
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327367 - https://vuldb.com/?ctiid.327367 - https://vuldb.com/?submit.666275 - https://github.com/DrNbnonono/CVE/issues/2 - https://www.sourcecodester.com/
CVE ID: CVE-2025-11431 State: PUBLISHED Published: 2025-10-08T04:02:06.936Z Last Updated: 2025-10-08T14:18:28.896Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Web-Based Inventory and POS System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. The impacted element is an unknown function of the file /transaction.php. This manipulation of the argument shopid causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
oit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327368 - https://vuldb.com/?ctiid.327368 - https://vuldb.com/?submit.666277 - https://github.com/asd1238525/cve/blob/main/SQL7.md - https://code-projects.org/
CVE ID: CVE-2025-11432 State: PUBLISHED Published: 2025-10-08T04:32:06.337Z Last Updated: 2025-10-08T14:52:57.347Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Leave Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /reset.php. Such manipulation of the argument employid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327369 - https://vuldb.com/?ctiid.3
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327369 - https://vuldb.com/?ctiid.327369 - https://vuldb.com/?submit.666326 - https://github.com/romatdibrohiksnov/vulndb.com/tree/main/itsourcecode%20leave%20management%20system%20Bulk%20Password%20Reset%20SQL%20Injection - https://itsourcecode.com/