Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-10766 State: PUBLISHED Published: 2025-09-21T07:02:05.789Z Last Updated: 2025-09-22T14:08:28.287Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: SeriaWei Products: ZKEACMS Problem Types: CWE-22 Description: A weakness has been identified in SeriaWei ZKEACMS up to 4.3. This issue affects the function Download of the file EventViewerController.cs. Executing manipulation of the argument ID can lead to path traversal. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional
and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325121 - https://vuldb.com/?ctiid.325121 - https://vuldb.com/?submit.650445 - https://github.com/August829/YU1/issues/1
CVE ID: CVE-2025-10767 State: PUBLISHED Published: 2025-09-21T22:02:07.886Z Last Updated: 2025-09-22T17:28:14.076Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: CosmodiumCS Products: OnlyRAT Problem Types: CWE-78, CWE-77 Description: A vulnerability was detected in CosmodiumCS OnlyRAT up to 3.2. The affected element is the function connect/remote_upload/remote_download of the file main.py of the component Configuration File Handler. The manipulation of the argument configuration["PASSWORD"] results in os command injection. The attack requires a local approach. Attacks of this nature are highly complex. The exploitability is described as diffi
he attack requires a local approach. Attacks of this nature are highly complex. The exploitability is described as difficult. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325123 - https://vuldb.com/?ctiid.325123 - https://vuldb.com/?submit.648118 - https://docs.google.com/document/d/1oq9YO831FbEDBI2BqNiW-7YA_kMzHJmMgy82F8f-L9g/edit?usp=sharing
CVE ID: CVE-2025-10768 State: PUBLISHED Published: 2025-09-21T09:33:16.643Z Last Updated: 2025-09-22T17:24:16.558Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: h2oai Products: h2o-3 Problem Types: CWE-502, CWE-20 Description: A flaw has been found in h2oai h2o-3 up to 3.46.08. The impacted element is an unknown function of the file /99/ImportSQLTable of the component IBMDB2 JDBC Driver. This manipulation of the argument connection_url causes deserialization. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA
d. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325124 - https://vuldb.com/?ctiid.325124 - https://vuldb.com/?submit.649508 - https://github.com/ez-lbz/poc/issues/50 - https://github.com/ez-lbz/poc/issues/50#issue-3389830879
CVE ID: CVE-2025-10769 State: PUBLISHED Published: 2025-09-21T09:33:19.679Z Last Updated: 2025-09-22T17:25:38.765Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: h2oai Products: h2o-3 Problem Types: CWE-502, CWE-20 Description: A vulnerability has been found in h2oai h2o-3 up to 3.46.08. This affects an unknown function of the file /99/ImportSQLTable of the component H2 JDBC Driver. Such manipulation of the argument connection_url leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Note
ay be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325125 - https://vuldb.com/?ctiid.325125 - https://vuldb.com/?submit.649728 - https://vuldb.com/?submit.649793 - https://github.com/ez-lbz/poc/issues/51 - https://github.com/ez-lbz/poc/issues/51#issue-3391023368 - https://huntr.com/bounties/4066ce21-7148-44f5-8336-b1674c2f588d
CVE ID: CVE-2025-10770 State: PUBLISHED Published: 2025-09-21T22:32:06.763Z Last Updated: 2025-09-22T13:50:38.708Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: jeecgboot Products: JimuReport Problem Types: CWE-502, CWE-20 Description: A vulnerability was found in jeecgboot JimuReport up to 2.1.2. This impacts an unknown function of the file /drag/onlDragDataSource/testConnection of the component MySQL JDBC Handler. Performing manipulation results in deserialization. Remote exploitation of the attack is possible. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325126 -
blic and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325126 - https://vuldb.com/?ctiid.325126 - https://vuldb.com/?submit.649755 - https://github.com/jeecgboot/jimureport/issues/4116 - https://github.com/jeecgboot/jimureport/issues/4116#issue-3391107887
CVE ID: CVE-2025-10771 State: PUBLISHED Published: 2025-09-21T23:02:07.444Z Last Updated: 2025-09-22T13:42:40.008Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: jeecgboot Products: JimuReport Problem Types: CWE-502, CWE-20 Description: A vulnerability was determined in jeecgboot JimuReport up to 2.1.2. Affected is an unknown function of the file /drag/onlDragDataSource/testConnection of the component DB2 JDBC Handler. Executing manipulation of the argument clientRerouteServerListJNDIName can lead to deserialization. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichme
d remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325127 - https://vuldb.com/?ctiid.325127 - https://vuldb.com/?submit.649778 - https://github.com/jeecgboot/jimureport/issues/4117 - https://github.com/jeecgboot/jimureport/issues/4117#issue-3391268438
CVE ID: CVE-2025-10772 State: PUBLISHED Published: 2025-09-21T23:32:05.896Z Last Updated: 2025-09-22T17:29:49.394Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:X) Vendors: huggingface Products: LeRobot Problem Types: CWE-306, CWE-287 Description: A vulnerability was identified in huggingface LeRobot up to 0.3.3. Affected by this vulnerability is an unknown functionality of the file lerobot/common/robot_devices/robots/lekiwi_remote.py of the component ZeroMQ Socket Handler. The manipulation leads to missing authentication. The attack can only be initiated within the local network. The vendor was contacted early about this disclosure but did not respond i
n only be initiated within the local network. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325128 - https://vuldb.com/?ctiid.325128 - https://vuldb.com/?submit.649798
CVE ID: CVE-2025-10773 State: PUBLISHED Published: 2025-09-22T00:02:07.094Z Last Updated: 2025-09-30T17:16:38.944Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: B-Link Products: BL-AC2100 Problem Types: CWE-121, CWE-119 Description: A security flaw has been discovered in B-Link BL-AC2100 up to 1.0.3. Affected by this issue is the function delshrpath of the file /goform/set_delshrpath_cfg of the component Web Management Interface. The manipulation of the argument Type results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosu
te. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325129 - https://vuldb.com/?ctiid.325129 - https://vuldb.com/?submit.649901 - https://github.com/maximdevere/CVE2/blob/main/README.md
CVE ID: CVE-2025-10774 State: PUBLISHED Published: 2025-09-22T00:32:08.224Z Last Updated: 2025-09-23T13:51:55.178Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Ruijie Products: 6000-E10 Problem Types: CWE-78, CWE-77 Description: A weakness has been identified in Ruijie 6000-E10 up to 2.4.3.6-20171117. This affects an unknown part of the file /view/vpn/autovpn/sub_commit.php. This manipulation of the argument key causes os command injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Ana
could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325130 - https://vuldb.com/?ctiid.325130 - https://vuldb.com/?submit.649968 - https://github.com/maximdevere/CVE2/issues/1
CVE ID: CVE-2025-10775 State: PUBLISHED Published: 2025-09-22T01:02:06.557Z Last Updated: 2025-09-22T16:12:51.103Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Wavlink Products: WL-NU516U1 Problem Types: CWE-78, CWE-77 Description: A security vulnerability has been detected in Wavlink WL-NU516U1 240425. This vulnerability affects the function sub_4012A0 of the file /cgi-bin/login.cgi. Such manipulation of the argument ipaddr leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst
and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325131 - https://vuldb.com/?ctiid.325131 - https://vuldb.com/?submit.650641 - https://github.com/swwer7000/iot
CVE ID: CVE-2025-10776 State: PUBLISHED Published: 2025-09-22T01:32:06.266Z Last Updated: 2025-09-22T15:56:18.971Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: LionCoders Products: SalePro POS Problem Types: CWE-319, CWE-310 Description: A vulnerability was detected in LionCoders SalePro POS up to 5.5.0. This issue affects some unknown processing of the component Login. Performing manipulation results in cleartext transmission of sensitive information. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitability is assessed as difficult. The exploit is now public and may be used. The vendor was cont
complexity. The exploitability is assessed as difficult. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325132 - https://vuldb.com/?ctiid.325132 - https://vuldb.com/?submit.650795 - https://github.com/PlsRevert/CVEs/issues/1 - https://github.com/PlsRevert/CVEs/issues/1#issue-3398101584
CVE ID: CVE-2025-10777 State: PUBLISHED Published: 2025-09-22T02:02:05.702Z Last Updated: 2025-09-22T15:55:31.309Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C) Vendors: JSC R7 Products: R7-Office Document Server Problem Types: CWE-22 Description: A flaw has been found in JSC R7 R7-Office Document Server up to 20250820. Impacted is an unknown function of the file /downloadas/. Executing manipulation of the argument cmd can lead to path traversal. The attack can be launched remotely. Upgrading to version 2025.3.1.923 is recommended to address this issue. The affected component should be upgraded. R7-Office is a fork of OpenOffice and at the moment it remains unclear if
e. The affected component should be upgraded. R7-Office is a fork of OpenOffice and at the moment it remains unclear if OpenOffice is affected as well. The OpenOffice team was not able to reproduce the issue in their codebase. The vendor replied: "We confirm that this vulnerability has been verified and patched in release 2025.3.1.923. During our security testing, it was not possible to exploit the issue - the server consistently returns proper error responses to the provided scenarios." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325133 - https://vuldb.com/?ctiid.325133 - https://vuldb.com/?submit.638446
CVE ID: CVE-2025-10778 State: PUBLISHED Published: 2025-09-22T02:32:05.702Z Last Updated: 2025-09-22T15:55:06.599Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:X/RL:X/RC:X) Vendors: n/a Products: Smartstore Problem Types: CWE-362 Description: A vulnerability has been found in Smartstore up to 6.2.0. The affected element is an unknown function of the file /checkout/confirm/ of the component Gift Voucher Handler. The manipulation leads to race condition. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is described as difficult. The vendor was contacted early about this disclosure but did not respond in any way. Additi
y is described as difficult. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325134 - https://vuldb.com/?ctiid.325134 - https://vuldb.com/?submit.640785
CVE ID: CVE-2025-10779 State: PUBLISHED Published: 2025-09-22T03:02:07.781Z Last Updated: 2025-09-22T15:54:41.821Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DCS-935L Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in D-Link DCS-935L up to 1.13.01. The impacted element is the function sub_402280 of the file /HNAP1/. The manipulation of the argument HNAP_AUTH/SOAPAction results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP
vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325135 - https://vuldb.com/?ctiid.325135 - https://vuldb.com/?submit.653690 - https://vuldb.com/?submit.653691 - https://github.com/scanleale/IOT_sec/blob/main/DCS-935L-1.pdf - https://github.com/scanleale/IOT_sec/blob/main/DCS-935L-2.pdf - https://www.dlink.com/
CVE ID: CVE-2025-10780 State: PUBLISHED Published: 2025-09-22T03:32:06.352Z Last Updated: 2025-09-22T15:53:40.835Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: CodeAstro Products: Simple Pharmacy Management Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in CodeAstro Simple Pharmacy Management 1.0. This affects an unknown function of the file /view.php. This manipulation of the argument bar_code causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325136 - https://vuldb.c
tilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325136 - https://vuldb.com/?ctiid.325136 - https://vuldb.com/?submit.653704 - https://github.com/yihaofuweng/cve/issues/26 - https://codeastro.com/
CVE ID: CVE-2025-10781 State: PUBLISHED Published: 2025-09-22T04:02:06.638Z Last Updated: 2025-09-22T15:53:05.966Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Learning Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in Campcodes Online Learning Management System 1.0. This impacts an unknown function of the file /admin/edit_class.php. Such manipulation of the argument class_name leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325137 - htt
e and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325137 - https://vuldb.com/?ctiid.325137 - https://vuldb.com/?submit.653780 - https://github.com/zzb1388/cve/issues/88 - https://www.campcodes.com/
CVE ID: CVE-2025-10782 State: PUBLISHED Published: 2025-09-22T04:32:06.728Z Last Updated: 2025-09-22T15:52:31.405Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Learning Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/class.php. Performing manipulation of the argument class_name results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325138 - https://vuldb.com/?ctiid.325138 - https://vuldb.com/?submit.653781 - https://github.com/zzb1388/cve/issues/87 - https://www.campcodes.com/
CVE ID: CVE-2025-10783 State: PUBLISHED Published: 2025-09-22T05:02:06.866Z Last Updated: 2025-09-22T15:51:54.789Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Learning Management System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in Campcodes Online Learning Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add_subject.php. Executing manipulation of the argument subject_code can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP
remote. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325139 - https://vuldb.com/?ctiid.325139 - https://vuldb.com/?submit.653782 - https://github.com/zzb1388/cve/issues/86 - https://www.campcodes.com/
CVE ID: CVE-2025-10784 State: PUBLISHED Published: 2025-09-22T05:32:07.567Z Last Updated: 2025-09-22T13:54:24.668Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Learning Management System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit_subject.php. The manipulation of the argument subject_code leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment
ack remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325140 - https://vuldb.com/?ctiid.325140 - https://vuldb.com/?submit.653783 - https://github.com/zzb1388/cve/issues/85 - https://www.campcodes.com/
CVE ID: CVE-2025-10785 State: PUBLISHED Published: 2025-09-22T06:02:06.171Z Last Updated: 2025-09-22T13:50:08.968Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Grocery Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown part of the file /manage_user.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325141 - https://vuldb.com/?c
ed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325141 - https://vuldb.com/?ctiid.325141 - https://vuldb.com/?submit.653784 - https://vuldb.com/?submit.653786 - https://github.com/zzb1388/cve/issues/84 - https://github.com/zzb1388/cve/issues/89 - https://www.campcodes.com/
CVE ID: CVE-2025-10786 State: PUBLISHED Published: 2025-09-22T06:32:07.319Z Last Updated: 2025-09-22T13:49:18.408Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Grocery Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=delete_user. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325142 - https://vu
may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325142 - https://vuldb.com/?ctiid.325142 - https://vuldb.com/?submit.653785 - https://github.com/zzb1388/cve/issues/83 - https://www.campcodes.com/
CVE ID: CVE-2025-10787 State: PUBLISHED Published: 2025-09-22T07:02:11.518Z Last Updated: 2025-09-22T15:51:23.441Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: n/a Products: MuYuCMS Problem Types: CWE-918 Description: A vulnerability was found in MuYuCMS up to 2.7. Impacted is an unknown function of the file /index/index.html of the component Add Fiend Link Handler. Performing manipulation of the argument Link URL results in server-side request forgery. The attack may be initiated remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325144 - https://vuldb.com/?cti
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325144 - https://vuldb.com/?ctiid.325144 - https://vuldb.com/?submit.653888 - https://gitee.com/MuYuCMS/MuYuCMS/issues/ICXV34
CVE ID: CVE-2025-10788 State: PUBLISHED Published: 2025-09-22T07:32:09.782Z Last Updated: 2025-09-22T15:50:30.704Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Hotel Reservation System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in SourceCodester Online Hotel Reservation System 1.0. The affected element is an unknown function of the file deleteroominventory.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
as been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325145 - https://vuldb.com/?ctiid.325145 - https://vuldb.com/?submit.653877 - https://github.com/peri0d/my_cve/blob/main/Online-Hotel-Reservation-System-In-PHP-With-Source-Code-deleteroominventory.php-sql-injection.md - https://www.sourcecodester.com/