Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ed remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316217 - https://vuldb.com/?ctiid.316217 - https://vuldb.com/?submit.610578 - https://github.com/f1rstb100d/myCVE/issues/121 - https://phpgurukul.com/
CVE ID: CVE-2025-7521 State: PUBLISHED Published: 2025-07-13T06:02:06.748Z Last Updated: 2025-07-15T19:54:31.406Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Vehicle Parking Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Vehicle Parking Management System 1.13. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316218 - https://vuldb.com/?ctiid.316218 - https://vuldb.com/?submit.610579 - https://github.com/f1rstb100d/myCVE/issues/122 - https://phpgurukul.com/
CVE ID: CVE-2025-7522 State: PUBLISHED Published: 2025-07-13T06:32:06.158Z Last Updated: 2025-07-15T19:54:25.619Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Vehicle Parking Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst
n. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316219 - https://vuldb.com/?ctiid.316219 - https://vuldb.com/?submit.610582 - https://github.com/f1rstb100d/myCVE/issues/124 - https://phpgurukul.com/
CVE ID: CVE-2025-7523 State: PUBLISHED Published: 2025-07-13T07:02:05.374Z Last Updated: 2025-07-15T19:54:19.426Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Jinher Products: OA Problem Types: CWE-611, CWE-610 Description: A vulnerability was found in Jinher OA 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /c6/Jhsoft.Web.message/ToolBar/DelTemp.aspx. The manipulation leads to xml external entity reference. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316220 - https:
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316220 - https://vuldb.com/?ctiid.316220 - https://vuldb.com/?submit.611183 - https://github.com/BigMancer/Jinhe-OA-XXE-Vulnerability - https://github.com/BigMancer/Jinhe-OA-XXE-Vulnerability?tab=readme-ov-file#proof-of-concept
CVE ID: CVE-2025-7524 State: PUBLISHED Published: 2025-07-13T09:02:08.791Z Last Updated: 2025-07-15T19:54:12.258Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: T6 Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015. It has been classified as critical. This affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment
emotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316221 - https://vuldb.com/?ctiid.316221 - https://vuldb.com/?submit.612935 - https://github.com/ElvisBlue/Public/blob/main/Vuln/2.md - https://github.com/ElvisBlue/Public/blob/main/Vuln/2.md#poc - https://www.youtube.com/watch?v=T62BuSoHmoM - https://www.totolink.net/
CVE ID: CVE-2025-7525 State: PUBLISHED Published: 2025-07-13T09:32:07.316Z Last Updated: 2025-07-15T19:54:04.270Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: T6 Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015. It has been declared as critical. This vulnerability affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument command leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vuln
tiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316222 - https://vuldb.com/?ctiid.316222 - https://vuldb.com/?submit.612936 - https://github.com/ElvisBlue/Public/blob/main/Vuln/3.md - https://github.com/ElvisBlue/Public/blob/main/Vuln/3.md#poc - https://youtu.be/GawLaYfTwYs - https://www.totolink.net/
CVE ID: CVE-2025-7526 State: PUBLISHED Published: 2025-10-09T05:23:52.415Z Last Updated: 2025-10-09T16:03:12.136Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: wptravelengine Products: WP Travel Engine – Tour Booking Plugin – Tour Operator Software Problem Types: CWE-22 Description: The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to arbitrary file deletion (via renaming) due to insufficient file path validation in the set_user_profile_image function in all versions up to, and including, 6.6.7. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easi
ing, 6.6.7. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c754d957-26a8-4fef-a487-96d566c2dc36?source=cve - https://plugins.trac.wordpress.org/browser/wp-travel-engine/tags/6.5.6/includes/dashboard/class-wp-travel-engine-form-handler.php#L512
CVE ID: CVE-2025-7527 State: PUBLISHED Published: 2025-07-13T10:32:07.306Z Last Updated: 2025-07-15T19:53:55.891Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH1202 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been rated as critical. This issue affects the function fromAdvSetWan of the file /goform/AdvSetWan. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3162
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316223 - https://vuldb.com/?ctiid.316223 - https://vuldb.com/?submit.612941 - https://github.com/panda666-888/vuls/blob/main/tenda/fh1202/fromAdvSetWan.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-7528 State: PUBLISHED Published: 2025-07-13T11:32:06.765Z Last Updated: 2025-07-15T19:53:48.069Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH1202 Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical has been found in Tenda FH1202 1.2.0.14(408). Affected is the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer. The manipulation of the argument dips leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316224
e public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316224 - https://vuldb.com/?ctiid.316224 - https://vuldb.com/?submit.612948 - https://github.com/panda666-888/vuls/blob/main/tenda/fh1202/fromGstDhcpSetSer.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-7529 State: PUBLISHED Published: 2025-07-13T12:02:06.294Z Last Updated: 2025-07-14T16:06:51.087Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH1202 Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical was found in Tenda FH1202 1.2.0.14(408). Affected by this vulnerability is the function fromNatlimit of the file /goform/Natlimit. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316225 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316225 - https://vuldb.com/?ctiid.316225 - https://vuldb.com/?submit.612955 - https://github.com/panda666-888/vuls/blob/main/tenda/fh1202/fromNatlimit.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-7530 State: PUBLISHED Published: 2025-07-13T15:02:07.201Z Last Updated: 2025-07-14T16:02:45.450Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH1202 Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, has been found in Tenda FH1202 1.2.0.14(408). Affected by this issue is the function fromPptpUserAdd of the file /goform/PPTPDClient. The manipulation of the argument Username leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316226 - https://vuldb.com/?ctiid.316226 - https://vuldb.com/?submit.612956 - https://github.com/panda666-888/vuls/blob/main/tenda/fh1202/fromPptpUserAdd.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-7531 State: PUBLISHED Published: 2025-07-13T15:32:06.988Z Last Updated: 2025-07-14T16:06:18.605Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH1202 Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, was found in Tenda FH1202 1.2.0.14(408). This affects the function fromPptpUserSetting of the file /goform/PPTPUserSetting. The manipulation of the argument delno leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316227 - https://vuldb.com/?ctiid.316227 - https://vuldb.com/?submit.612957 - https://github.com/panda666-888/vuls/blob/main/tenda/fh1202/fromPptpUserSetting.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-7532 State: PUBLISHED Published: 2025-07-13T16:02:08.791Z Last Updated: 2025-07-14T16:05:45.515Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH1202 Problem Types: CWE-121, CWE-119 Description: A vulnerability has been found in Tenda FH1202 1.2.0.14(408) and classified as critical. This vulnerability affects the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316228 - https://vuldb.com/?ctiid.316228 - https://vuldb.com/?submit.612958 - https://github.com/panda666-888/vuls/blob/main/tenda/fh1202/fromwebExcptypemanFilter.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-7533 State: PUBLISHED Published: 2025-07-13T16:32:05.087Z Last Updated: 2025-07-14T16:05:12.175Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Job Diary Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Job Diary 1.0 and classified as critical. This issue affects some unknown processing of the file /view-details.php. The manipulation of the argument job_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316229 - https://vul
may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316229 - https://vuldb.com/?ctiid.316229 - https://vuldb.com/?submit.613045 - https://github.com/manbo001/CVE/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-7534 State: PUBLISHED Published: 2025-07-13T17:02:07.051Z Last Updated: 2025-07-14T16:04:37.432Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Student Result Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Student Result Management System 2.0. It has been classified as critical. Affected is an unknown function of the file /notice-details.php of the component GET Parameter Handler. The manipulation of the argument nid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Note
ble to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316230 - https://vuldb.com/?ctiid.316230 - https://vuldb.com/?submit.613168 - https://github.com/4m3rr0r/PoCVulDb/blob/main/CVE-2025-7534.md - https://phpgurukul.com/
CVE ID: CVE-2025-7535 State: PUBLISHED Published: 2025-07-13T17:32:06.479Z Last Updated: 2025-07-14T16:04:00.529Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /pages/reprint_cash.php. The manipulation of the argument sid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316231 - https://vuldb.com/?ctiid.316231 - https://vuldb.com/?submit.613622 - https://github.com/zhaodaojie/cve/issues/4 - https://www.campcodes.com/
CVE ID: CVE-2025-7536 State: PUBLISHED Published: 2025-07-13T18:02:05.401Z Last Updated: 2025-07-14T16:03:26.676Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pages/receipt_credit.php. The manipulation of the argument sid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
xploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316232 - https://vuldb.com/?ctiid.316232 - https://vuldb.com/?submit.613623 - https://github.com/zhaodaojie/cve/issues/3 - https://www.campcodes.com/
CVE ID: CVE-2025-7537 State: PUBLISHED Published: 2025-07-13T18:32:06.069Z Last Updated: 2025-07-14T16:02:08.617Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /pages/product_update.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316233 - https://vuldb.com/?ctiid.316233 - https://vuldb.com/?submit.613624 - https://github.com/zhaodaojie/cve/issues/2 - https://www.campcodes.com/
CVE ID: CVE-2025-7538 State: PUBLISHED Published: 2025-07-13T19:02:05.882Z Last Updated: 2025-07-14T16:01:35.020Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical was found in Campcodes Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/product_update.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316234 - https://vuldb.com/?ctiid.316234 - https://vuldb.com/?submit.613625 - https://github.com/zhaodaojie/cve/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-7539 State: PUBLISHED Published: 2025-07-13T19:32:05.511Z Last Updated: 2025-07-15T19:53:41.527Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Appointment Booking System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in code-projects Online Appointment Booking System 1.0. This issue affects some unknown processing of the file /getdoctordaybooking.php. The manipulation of the argument cid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnr
iated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316235 - https://vuldb.com/?ctiid.316235 - https://vuldb.com/?submit.613689 - https://github.com/bit001020/cve/issues/3 - https://code-projects.org/
CVE ID: CVE-2025-7540 State: PUBLISHED Published: 2025-07-13T20:02:05.537Z Last Updated: 2025-07-15T19:53:35.074Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Appointment Booking System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in code-projects Online Appointment Booking System 1.0. Affected is an unknown function of the file /getclinic.php. The manipulation of the argument townid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional An
The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316236 - https://vuldb.com/?ctiid.316236 - https://vuldb.com/?submit.613690 - https://github.com/bit001020/cve/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-7541 State: PUBLISHED Published: 2025-07-13T20:32:05.671Z Last Updated: 2025-07-15T19:53:28.629Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Appointment Booking System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /get_town.php. The manipulation of the argument countryid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as we
aunched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316237 - https://vuldb.com/?ctiid.316237 - https://vuldb.com/?submit.613691 - https://github.com/bit001020/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-7542 State: PUBLISHED Published: 2025-07-13T21:02:06.618Z Last Updated: 2025-07-15T19:53:22.741Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: User Registration & Login and User Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul User Registration & Login and User Management System 3.3 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/user-profile.php. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Anal
tion. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316238 - https://vuldb.com/?ctiid.316238 - https://vuldb.com/?submit.613919 - https://github.com/4m3rr0r/PoCVulDb/blob/main/CVE-2025-7542.md - https://phpgurukul.com/
CVE ID: CVE-2025-7543 State: PUBLISHED Published: 2025-07-13T21:14:06.706Z Last Updated: 2025-07-15T19:53:16.206Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: User Registration & Login and User Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul User Registration & Login and User Management System 3.3. It has been classified as critical. This affects an unknown part of the file /admin/manage-users.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst N
ible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316239 - https://vuldb.com/?ctiid.316239 - https://vuldb.com/?submit.613920 - https://github.com/4m3rr0r/PoCVulDb/blob/main/CVE-2025-7543.md - https://phpgurukul.com/