Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-11456 State: PUBLISHED Published: 2025-11-21T07:31:53.625Z Last Updated: 2025-11-24T18:03:39.629Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: elextensions Products: ELEX WordPress HelpDesk & Customer Ticketing System Problem Types: CWE-434 Description: The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the eh_crm_new_ticket_post() function in all versions up to, and including, 3.3.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possi
thenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a6f362c1-fe64-4be1-9713-14c0561a59ce?source=cve - https://plugins.trac.wordpress.org/browser/elex-helpdesk-customer-support-ticket-system/trunk/includes/class-crm-ajax-functions-three.php?rev=3332203 - https://wordpress.org/plugins/elex-helpdesk-customer-support-ticket-system/ - https://plugins.trac.wordpress.org/changeset/3399391/elex-helpdesk-customer-support-ticket-system/trunk/includes/class-crm-ajax-functions-three.php
CVE ID: CVE-2025-11457 State: PUBLISHED Published: 2025-11-11T03:30:43.033Z Last Updated: 2025-11-14T15:31:28.650Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: easycommerce Products: EasyCommerce – AI-Powered, Fast & Beautiful WordPress Ecommerce Plugin Problem Types: CWE-269 Description: The EasyCommerce – AI-Powered, Fast & Beautiful WordPress Ecommerce Plugin plugin for WordPress is vulnerable to Privilege Escalation in versions 0.9.0-beta2 to 1.5.0. This is due to the /easycommerce/v1/orders REST API endpoint not properly restricting the ability for users to select roles during registration. This makes it possible for unauthenticated attackers to ga
ng the ability for users to select roles during registration. This makes it possible for unauthenticated attackers to gain administrator-level access to a vulnerable site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7ebe84ba-abc1-410c-b315-118746ff235a?source=cve - https://wordpress.org/plugins/easycommerce/
CVE ID: CVE-2025-11458 State: PUBLISHED Published: 2025-11-06T22:26:49.076Z Last Updated: 2025-11-08T04:55:18.292Z Vendors: Google Products: Chrome Problem Types: CWE-122 Description: Heap buffer overflow in Sync in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/443196747
CVE ID: CVE-2025-11460 State: PUBLISHED Published: 2025-11-06T22:26:49.566Z Last Updated: 2025-11-12T17:09:51.361Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to execute arbitrary code via a crafted video file. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/446722008
CVE ID: CVE-2025-11462 State: PUBLISHED Published: 2025-10-07T19:44:25.608Z Last Updated: 2025-10-14T17:43:31.988Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: AWS Products: Client VPN Problem Types: CWE-59 Description: Improper Link Resolution Before File Access in the AWS VPN Client for macOS versions 1.3.2- 5.2.0 allows a local user to execute code with elevated privileges. Insufficient validation checks on the log destination directory during log rotation could allow a non-administrator user to create a symlink from a client log file to a privileged location. On log rotation, this could lead to code execution with root privileges if the user made crafte
o a privileged location. On log rotation, this could lead to code execution with root privileges if the user made crafted API calls which injected arbitrary code into the log file. We recommend users upgrade to AWS VPN Client for macOS 5.2.1 or the latest version. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://aws.amazon.com/security/security-bulletins/AWS-2025-020/ - https://docs.aws.amazon.com/vpn/latest/clientvpn-user/client-vpn-connect-macos-release-notes.html
CVE ID: CVE-2025-11463 State: PUBLISHED Published: 2025-10-29T19:43:29.758Z Last Updated: 2025-10-30T14:33:11.565Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Ashlar-Vellum Products: Cobalt Problem Types: CWE-190 Description: Ashlar-Vellum Cobalt XE File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XE files. The issue results from the lack of pro
r open a malicious file. The specific flaw exists within the parsing of XE files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26626. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-954/
CVE ID: CVE-2025-11464 State: PUBLISHED Published: 2025-10-29T19:43:41.524Z Last Updated: 2025-10-30T14:21:54.611Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Ashlar-Vellum Products: Cobalt Problem Types: CWE-122 Description: Ashlar-Vellum Cobalt CO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CO files. The issue results from the l
ous page or open a malicious file. The specific flaw exists within the parsing of CO files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26628. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-955/
CVE ID: CVE-2025-11465 State: PUBLISHED Published: 2025-10-29T19:44:00.443Z Last Updated: 2025-10-30T14:11:26.417Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Ashlar-Vellum Products: Cobalt Problem Types: CWE-416 Description: Ashlar-Vellum Cobalt CO File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CO files. The issue results from the lack of valid
open a malicious file. The specific flaw exists within the parsing of CO files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26631. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-956/
CVE ID: CVE-2025-11466 State: PUBLISHED Published: 2025-10-29T19:42:58.285Z Last Updated: 2025-10-30T14:33:47.575Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Allegra Products: Allegra Problem Types: CWE-22 Description: Allegra DatabaseBackupBL Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the DatabaseBackupBL class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker
sue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of the service account. Was ZDI-CAN-27136. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-951/ - https://alltena.com/en/resources/release-notes/release-notes-for-release-8-1-6
CVE ID: CVE-2025-11469 State: PUBLISHED Published: 2025-10-08T10:02:07.134Z Last Updated: 2025-10-08T15:58:37.353Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Hotel and Lodge Management System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The affected element is an unknown function of the file /pages/save_customer.php. Executing manipulation of the argument Contact can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment
exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327587 - https://vuldb.com/?ctiid.327587 - https://vuldb.com/?submit.665461 - https://github.com/TThuyyy/cve1/issues/8 - https://www.sourcecodester.com/
CVE ID: CVE-2025-11470 State: PUBLISHED Published: 2025-10-08T10:02:10.280Z Last Updated: 2025-10-08T15:31:39.338Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Hotel and Lodge Management System Problem Types: CWE-434, CWE-284 Description: A security vulnerability has been detected in SourceCodester Hotel and Lodge Management System up to 1.0. The impacted element is an unknown function of the file /manage_website.php. The manipulation of the argument website_image/back_login_image leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. Additional Analys
ttack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327588 - https://vuldb.com/?ctiid.327588 - https://vuldb.com/?submit.665462 - https://github.com/TThuyyy/cve1/issues/13 - https://www.sourcecodester.com/
CVE ID: CVE-2025-11471 State: PUBLISHED Published: 2025-10-08T11:32:05.924Z Last Updated: 2025-10-08T13:20:30.498Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Hotel and Lodge Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown function of the file /edit_customer.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327589 - https://vul
may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327589 - https://vuldb.com/?ctiid.327589 - https://vuldb.com/?submit.665473 - https://github.com/TThuyyy/cve1/issues/14 - https://www.sourcecodester.com/
CVE ID: CVE-2025-11472 State: PUBLISHED Published: 2025-10-08T12:02:06.900Z Last Updated: 2025-10-08T13:13:53.736Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Hotel and Lodge Management System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0. This impacts an unknown function of the file /edit_room.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327590 - https://vuldb
y be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327590 - https://vuldb.com/?ctiid.327590 - https://vuldb.com/?submit.665476 - https://github.com/TThuyyy/cve1/issues/15 - https://www.sourcecodester.com/
CVE ID: CVE-2025-11473 State: PUBLISHED Published: 2025-10-08T12:02:10.086Z Last Updated: 2025-10-08T13:03:01.791Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Hotel and Lodge Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in SourceCodester Hotel and Lodge Management System 1.0. Affected is an unknown function of the file /edit_curr.php. Such manipulation of the argument currsymbol leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327591 - https://vuldb.com/?ctiid.327591 - https://vuldb.com/?submit.665477 - https://github.com/TThuyyy/cve1/issues/16 - https://www.sourcecodester.com/
CVE ID: CVE-2025-11474 State: PUBLISHED Published: 2025-10-08T12:32:06.597Z Last Updated: 2025-10-08T13:00:40.129Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Hotel and Lodge Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit_booking.php. Performing manipulation of the argument Name results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
e exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327592 - https://vuldb.com/?ctiid.327592 - https://vuldb.com/?submit.665478 - https://github.com/TThuyyy/cve1/issues/17 - https://www.sourcecodester.com/
CVE ID: CVE-2025-11475 State: PUBLISHED Published: 2025-10-08T13:02:06.025Z Last Updated: 2025-10-08T17:34:18.732Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: projectworlds Products: Advanced Library Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /view_member.php. Executing manipulation of the argument user_id can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References
e exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327593 - https://vuldb.com/?ctiid.327593 - https://vuldb.com/?submit.667107 - https://github.com/ChenGuangHuangHun/CVE/issues/4
CVE ID: CVE-2025-11476 State: PUBLISHED Published: 2025-10-08T13:32:06.834Z Last Updated: 2025-10-08T13:52:55.909Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Simple E-Commerce Bookstore Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in SourceCodester Simple E-Commerce Bookstore 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument login_username leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327594 - https://vuldb.co
e used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327594 - https://vuldb.com/?ctiid.327594 - https://vuldb.com/?submit.667117 - https://github.com/DrNbnonono/CVE/issues/5 - https://www.sourcecodester.com/
CVE ID: CVE-2025-11477 State: PUBLISHED Published: 2025-10-08T14:02:06.160Z Last Updated: 2025-10-08T14:26:26.928Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Wedding Reservation Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in SourceCodester Wedding Reservation Management System 1.0. This vulnerability affects unknown code of the file /global.php. The manipulation of the argument User results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
een released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327595 - https://vuldb.com/?ctiid.327595 - https://vuldb.com/?submit.667119 - https://github.com/DrNbnonono/CVE/issues/4 - https://www.sourcecodester.com/
CVE ID: CVE-2025-11478 State: PUBLISHED Published: 2025-10-08T14:02:09.000Z Last Updated: 2025-10-08T14:23:21.459Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Farm Management System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in SourceCodester Farm Management System 1.0. This issue affects some unknown processing of the file /myCart.php. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.32
public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327596 - https://vuldb.com/?ctiid.327596 - https://vuldb.com/?submit.667341 - https://github.com/DrNbnonono/CVE/issues/6 - https://www.sourcecodester.com/
CVE ID: CVE-2025-11479 State: PUBLISHED Published: 2025-10-08T14:32:06.086Z Last Updated: 2025-10-08T15:55:25.093Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Wedding Reservation Management System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in SourceCodester Wedding Reservation Management System 1.0. Impacted is the function insertReservation of the file function.php. Such manipulation of the argument number leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
xploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327597 - https://vuldb.com/?ctiid.327597 - https://vuldb.com/?submit.667388 - https://github.com/DrNbnonono/CVE/issues/7 - https://www.sourcecodester.com/
CVE ID: CVE-2025-11480 State: PUBLISHED Published: 2025-10-08T14:32:09.306Z Last Updated: 2025-10-08T15:21:10.560Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Simple E-Commerce Bookstore Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /register.php. Performing manipulation of the argument register_username results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327598 - https://vuldb.com/?ctiid.327598 - https://vuldb.com/?submit.667391 - https://github.com/DrNbnonono/CVE/issues/8 - https://www.sourcecodester.com/
CVE ID: CVE-2025-11481 State: PUBLISHED Published: 2025-10-08T16:32:05.578Z Last Updated: 2025-10-08T17:24:47.368Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: varunsardana004 Products: Blood-Bank-And-Donation-Management-System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in varunsardana004 Blood-Bank-And-Donation-Management-System up to dc9e0393d826fbc85fad9755b5bc12cba1919df2. The impacted element is an unknown function of the file /donate_blood.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. This product utilizes a r
tion. The attack may be performed from remote. The exploit has been published and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327599 - https://vuldb.com/?ctiid.327599 - https://vuldb.com/?submit.667394 - https://github.com/sanin-s1r3n/CVE-Research/blob/main/CVE-3
CVE ID: CVE-2025-11485 State: PUBLISHED Published: 2025-10-08T17:02:05.884Z Last Updated: 2025-10-08T18:03:18.416Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Student Grades Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function add_user of the file /admin.php of the component Manage Users Page. This manipulation of the argument first_name/last_name causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnr
tiated remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327602 - https://vuldb.com/?ctiid.327602 - https://vuldb.com/?submit.667406 - https://github.com/sidzeroday/sourcecodester_cve/blob/main/README.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-11486 State: PUBLISHED Published: 2025-10-08T17:02:09.059Z Last Updated: 2025-10-10T14:24:57.465Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Farm Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in SourceCodester Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /buyNow.php. Such manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327603 - https
and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.327603 - https://vuldb.com/?ctiid.327603 - https://vuldb.com/?submit.667414 - https://github.com/DrNbnonono/CVE/issues/10 - https://www.sourcecodester.com/