Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
y be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309047 - https://vuldb.com/?ctiid.309047 - https://vuldb.com/?submit.571035 - https://github.com/lche511/cve/issues/1
CVE ID: CVE-2025-4748 State: PUBLISHED Published: 2025-06-16T11:00:54.643Z Last Updated: 2025-09-02T15:59:55.774Z Vendors: Erlang Products: OTP Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2, zip:extract/1, zip:extract/2 unless the memory option is passed. This issue affects OTP from OTP 17.0 until OTP 28.0.1, OTP 27.3.4.1 and OTP 26.2.5.13, corresponding to stdlib from 2.0 until 7.0.1, 6.2.2.1 and 5.2.3.4. Addit
til OTP 28.0.1, OTP 27.3.4.1 and OTP 26.2.5.13, corresponding to stdlib from 2.0 until 7.0.1, 6.2.2.1 and 5.2.3.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/erlang/otp/security/advisories/GHSA-9g37-pgj9-wrhc - https://www.erlang.org/doc/system/versions.html#order-of-versions - https://github.com/erlang/otp/pull/9941 - https://github.com/erlang/otp/commit/5a55feec10c9b69189d56723d8f237afa58d5d4f - https://github.com/erlang/otp/commit/ba2f2bc5f45fcfd2d6201ba07990a678bbf4cc8f - https://github.com/erlang/otp/commit/578d4001575aa7647ea1efd4b2b7e3afadcc99a5
CVE ID: CVE-2025-4749 State: PUBLISHED Published: 2025-05-16T05:00:09.105Z Last Updated: 2025-05-16T15:55:04.593Z Severity: N/A (CVSS 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C) Vendors: D-Link Products: DI-7003GV2 Problem Types: CWE-404 Description: A vulnerability classified as critical was found in D-Link DI-7003GV2 24.04.18D1 R(68125). This vulnerability affects the function sub_4983B0 of the file /H5/backup.asp?opt=reset of the component Factory Reset Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309052 - h
ublic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309052 - https://vuldb.com/?ctiid.309052 - https://vuldb.com/?submit.571068 - https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/backup.md - https://www.dlink.com/
CVE ID: CVE-2025-4750 State: PUBLISHED Published: 2025-05-16T05:31:04.590Z Last Updated: 2025-05-16T15:54:14.234Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: D-Link Products: DI-7003GV2 Problem Types: CWE-200, CWE-284 Description: A vulnerability, which was classified as problematic, has been found in D-Link DI-7003GV2 24.04.18D1 R(68125). This issue affects some unknown processing of the file /H5/get_version.data of the component Configuration Handler. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
ly. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309053 - https://vuldb.com/?ctiid.309053 - https://vuldb.com/?submit.571069 - https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/get_version.md - https://www.dlink.com/
CVE ID: CVE-2025-4751 State: PUBLISHED Published: 2025-05-16T06:00:06.635Z Last Updated: 2025-05-16T13:14:05.881Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: D-Link Products: DI-7003GV2 Problem Types: CWE-200, CWE-284 Description: A vulnerability, which was classified as problematic, was found in D-Link DI-7003GV2 24.04.18D1 R(68125). Affected is an unknown function of the file /index.data. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309054 - https://vuldb.
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309054 - https://vuldb.com/?ctiid.309054 - https://vuldb.com/?submit.571070 - https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/index.md - https://www.dlink.com/
CVE ID: CVE-2025-4752 State: PUBLISHED Published: 2025-05-16T06:00:08.748Z Last Updated: 2025-05-16T15:41:38.322Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: D-Link Products: DI-7003GV2 Problem Types: CWE-200, CWE-284 Description: A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R(68125) and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /install_base.data. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309055 - https://vuldb.com/?ctiid.309055 - https://vuldb.com/?submit.571071 - https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/install_base.md - https://www.dlink.com/
CVE ID: CVE-2025-4753 State: PUBLISHED Published: 2025-05-16T06:31:05.439Z Last Updated: 2025-05-16T15:34:43.096Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: D-Link Products: DI-7003GV2 Problem Types: CWE-200, CWE-284 Description: A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R(68125) and classified as problematic. Affected by this issue is some unknown functionality of the file /login.data. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309056 - https://vu
may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309056 - https://vuldb.com/?ctiid.309056 - https://vuldb.com/?submit.571072 - https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/login.md - https://www.dlink.com/
CVE ID: CVE-2025-4754 State: PUBLISHED Published: 2025-06-17T14:31:37.006Z Last Updated: 2025-09-02T15:59:56.541Z Vendors: ash-project Products: ash_authentication_phoenix Problem Types: CWE-613 Description: Insufficient Session Expiration vulnerability in ash-project ash_authentication_phoenix allows Session Hijacking. This vulnerability is associated with program files lib/ash_authentication_phoenix/controller.ex. This issue affects ash_authentication_phoenix until 2.10.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/team-alembic/ash_authentication_phoenix/security/advisories/GHSA-f7gq-h8jv-h3cq - https://github.com/team-alembic/ash_authentication_pho
_authentication_phoenix/security/advisories/GHSA-f7gq-h8jv-h3cq - https://github.com/team-alembic/ash_authentication_phoenix/pull/634 - https://github.com/team-alembic/ash_authentication_phoenix/commit/a3253fb4fc7145aeb403537af1c24d3a8d51ffb1
CVE ID: CVE-2025-4755 State: PUBLISHED Published: 2025-05-16T07:00:09.689Z Last Updated: 2025-05-16T15:31:03.152Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: D-Link Products: DI-7003GV2 Problem Types: CWE-287 Description: A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R(68125). It has been classified as critical. This affects the function sub_497DE4 of the file /H5/netconfig.asp. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309057 - https://vuldb.com/?ctiid.309057
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309057 - https://vuldb.com/?ctiid.309057 - https://vuldb.com/?submit.571073 - https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/netconfig.md - https://www.dlink.com/
CVE ID: CVE-2025-4756 State: PUBLISHED Published: 2025-05-16T07:31:05.830Z Last Updated: 2025-05-16T15:53:04.233Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: D-Link Products: DI-7003GV2 Problem Types: CWE-404 Description: A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R(68125). It has been declared as problematic. This vulnerability affects unknown code of the file /H5/restart.asp. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309058 - https://vuldb.com/?ctiid.
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309058 - https://vuldb.com/?ctiid.309058 - https://vuldb.com/?submit.571077 - https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/restart.md - https://www.dlink.com/
CVE ID: CVE-2025-4757 State: PUBLISHED Published: 2025-05-16T07:31:08.940Z Last Updated: 2025-05-16T15:52:29.431Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Beauty Parlour Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Beauty Parlour Management System 1.1. It has been rated as critical. This issue affects some unknown processing of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309059 - https://vuldb.com/?ctiid.309059 - https://vuldb.com/?submit.571303 - https://github.com/xinxinwang99/CVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-4758 State: PUBLISHED Published: 2025-05-16T08:00:08.881Z Last Updated: 2025-05-16T15:51:39.317Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Beauty Parlour Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected is an unknown function of the file /contact.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment
he public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309060 - https://vuldb.com/?ctiid.309060 - https://vuldb.com/?submit.571306 - https://github.com/xinxinwang99/CVE/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-4759 State: PUBLISHED Published: 2025-05-16T05:00:04.621Z Last Updated: 2025-05-16T17:39:24.899Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L/E:P) Vendors: n/a Products: lockfile-lint-api Problem Types: CWE-179 Description: Versions of the package lockfile-lint-api before 5.9.2 are vulnerable to Incorrect Behavior Order: Early Validation via the resolved attribute of the package URL validation which can be bypassed by extending the package name allowing an attacker to install other npm packages than the intended one. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-LOCKFILELINTAPI-10169587 - https
yst Notes: - CISA ADP Vulnrichment: References: - https://security.snyk.io/vuln/SNYK-JS-LOCKFILELINTAPI-10169587 - https://gist.github.com/Xavier59/881aef04940970dc3e738dcbff64151f - https://github.com/lirantal/lockfile-lint/blob/89b5cad028df4d77bab2b73ac93bc61e392668ab/packages/lockfile-lint-api/src/validators/ValidatePackageNames.js%23L51-L63 - https://github.com/lirantal/lockfile-lint/pull/204 - https://github.com/lirantal/lockfile-lint/commit/9e5305bd3e4f0c6acc0d23ec43eac2bd5303b4ca
CVE ID: CVE-2025-4760 State: PUBLISHED Published: 2025-09-23T14:55:04.917Z Last Updated: 2025-09-23T19:58:26.062Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: WSO2 Products: WSO2 API Manager, WSO2 API Control Plane, WSO2 Universal Gateway, WSO2 Traffic Manager, WSO2 Carbon API Management API Problem Types: CWE-79 Description: An authenticated stored cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to improper validation of user-supplied input during API document upload in the Publisher portal. A user with publisher privileges can upload a crafted API document containing malicious JavaScript, which is later rendered in the brow
lisher privileges can upload a crafted API document containing malicious JavaScript, which is later rendered in the browser when accessed by other users. A successful attack could result in redirection to malicious websites, unauthorized UI modifications, or exfiltration of browser-accessible data. However, session-related sensitive cookies are protected by the httpOnly flag, preventing session hijacking. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-4104/
CVE ID: CVE-2025-4761 State: PUBLISHED Published: 2025-05-16T08:00:12.352Z Last Updated: 2025-05-16T15:50:51.488Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Complaint Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Complaint Management System 2.0 and classified as critical. This vulnerability affects unknown code of the file /admin/admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309064 - https://vuldb.com/?ctiid.309064 - https://vuldb.com/?submit.571314 - https://github.com/bleakTS/myCVE/issues/5 - https://phpgurukul.com/
CVE ID: CVE-2025-4762 State: PUBLISHED Published: 2025-05-15T11:49:59.054Z Last Updated: 2025-05-15T13:28:18.267Z Vendors: Lleidanet PKI Products: eSigna Problem Types: CWE-20 Description: Insecure Direct Object Reference (IDOR) vulnerability in the eSignaViewer component in eSigna product versions 1.0 to 1.5 on all platforms allow an unauthenticated attacker to access arbitrary files in the document system via manipulation of file paths and object identifiers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://edgewatch.com/vulnerability-advisories/path-traversal-and-idor-vulnerabilities-in-esignaviewer-allow-unauthorized-file-access/
CVE ID: CVE-2025-4765 State: PUBLISHED Published: 2025-05-16T08:31:06.442Z Last Updated: 2025-05-16T15:49:28.129Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Zoo Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been classified as critical. Affected is an unknown function of the file /admin/contactus.php. The manipulation of the argument mobnum leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309066 - ht
blic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309066 - https://vuldb.com/?ctiid.309066 - https://vuldb.com/?submit.571345 - https://github.com/bleakTS/myCVE/issues/9 - https://phpgurukul.com/
CVE ID: CVE-2025-4766 State: PUBLISHED Published: 2025-05-16T09:00:09.966Z Last Updated: 2025-05-16T15:21:51.874Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Zoo Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309067 - https://vuldb.com/?ctiid.309067 - https://vuldb.com/?submit.571351 - https://github.com/bleakTS/myCVE/issues/10 - https://phpgurukul.com/
CVE ID: CVE-2025-4767 State: PUBLISHED Published: 2025-05-16T09:31:26.176Z Last Updated: 2025-05-16T15:19:17.744Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: defog-ai Products: introspect Problem Types: CWE-94, CWE-74 Description: A vulnerability was found in defog-ai introspect up to 0.1.4. It has been rated as critical. Affected by this issue is the function test_custom_tool of the file introspect/backend/integration_routes.py of the component Test Endpoint. The manipulation of the argument input_model leads to code injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - C
ng locally is a requirement. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309068 - https://vuldb.com/?ctiid.309068 - https://vuldb.com/?submit.571363 - https://github.com/defog-ai/introspect/issues/496 - https://github.com/defog-ai/introspect/issues/496#issue-3036183861
CVE ID: CVE-2025-4768 State: PUBLISHED Published: 2025-05-16T10:00:07.182Z Last Updated: 2025-05-16T15:06:49.344Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: feng_ha_ha, megagao Products: ssm-erp, production_ssm Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical has been found in feng_ha_ha/megagao ssm-erp and production_ssm 1.0. This affects the function uploadPicture of the file PictureServiceImpl.java. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product is distributed under two entirely different names.
xploit has been disclosed to the public and may be used. This product is distributed under two entirely different names. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309069 - https://vuldb.com/?ctiid.309069 - https://vuldb.com/?submit.571737 - https://github.com/Hao-Ni/CVE/issues/4
CVE ID: CVE-2025-4769 State: PUBLISHED Published: 2025-05-16T10:39:01.349Z Last Updated: 2025-05-16T15:00:29.382Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CBEWIN Products: Anytxt Searcher Problem Types: CWE-427, CWE-426 Description: A vulnerability classified as critical was found in CBEWIN Anytxt Searcher 1.3.1128.0. This vulnerability affects unknown code of the file ATService.exe. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309070 -
appears to be difficult. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309070 - https://vuldb.com/?ctiid.309070 - https://vuldb.com/?submit.571820 - https://www.yuque.com/ba1ma0-an29k/nnxoap/ds2f8b1hdc4ng9zg?singleDoc
CVE ID: CVE-2025-4770 State: PUBLISHED Published: 2025-05-16T11:00:07.999Z Last Updated: 2025-05-16T13:17:02.139Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Park Ticketing Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Park Ticketing Management System 2.0. This issue affects some unknown processing of the file /view-normal-ticket.php. The manipulation of the argument viewid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309071 - https://vuldb.com/?ctiid.309071 - https://vuldb.com/?submit.572134 - https://github.com/f1rstb100d/myCVE/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-4771 State: PUBLISHED Published: 2025-05-16T11:31:05.521Z Last Updated: 2025-05-16T12:46:57.427Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online Course Registration Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/course.php. The manipulation of the argument coursecode leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309072 - https://vuldb.com/?ctiid.309072 - https://vuldb.com/?submit.572135 - https://github.com/FLYFISH567/CVE/issues/4 - https://phpgurukul.com/
CVE ID: CVE-2025-4772 State: PUBLISHED Published: 2025-05-16T12:00:07.927Z Last Updated: 2025-05-16T13:05:20.583Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online Course Registration Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Online Course Registration 3.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/department.php. The manipulation of the argument department leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309073 - https://vuldb.com/?ctiid.309073 - https://vuldb.com/?submit.572143 - https://github.com/FLYFISH567/CVE/issues/5 - https://phpgurukul.com/
CVE ID: CVE-2025-4773 State: PUBLISHED Published: 2025-05-16T12:31:05.977Z Last Updated: 2025-05-16T13:02:12.346Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online Course Registration Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Online Course Registration 3.1 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/level.php. The manipulation of the argument level leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309
o the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.309074 - https://vuldb.com/?ctiid.309074 - https://vuldb.com/?submit.572144 - https://github.com/FLYFISH567/CVE/issues/6 - https://phpgurukul.com/