Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-0534 State: PUBLISHED Published: 2025-01-17T18:31:04.702Z Last Updated: 2025-01-17T21:02:33.531Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: 1000 Projects Products: Campaign Management System Platform for Women Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in 1000 Projects Campaign Management System Platform for Women 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Code/loginnew.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP
e launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292418 - https://vuldb.com/?ctiid.292418 - https://vuldb.com/?submit.479128 - https://github.com/onupset/CVE/issues/3 - https://1000projects.org/
CVE ID: CVE-2025-0535 State: PUBLISHED Published: 2025-01-17T19:00:16.943Z Last Updated: 2025-01-21T16:42:16.581Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Codezips Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in Codezips Gym Management System 1.0. This affects an unknown part of the file /dashboard/admin/edit_mem_submit.php. The manipulation of the argument uid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292419 - ht
blic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292419 - https://vuldb.com/?ctiid.292419 - https://vuldb.com/?submit.479159 - https://github.com/lan041221/cve/blob/main/SQL_Injection_in_Gym_Management_System.md
CVE ID: CVE-2025-0536 State: PUBLISHED Published: 2025-01-17T19:31:04.585Z Last Updated: 2025-01-17T20:28:52.896Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: 1000 Projects Products: Attendance Tracking Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/edit_action.php. The manipulation of the argument attendance_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292420 - https://vuldb.com/?ctiid.292420 - https://vuldb.com/?submit.479251 - https://github.com/lan041221/cve/blob/main/Attendance_Tracking_Management_System_SQL_Injection.md - https://1000projects.org/
CVE ID: CVE-2025-0537 State: PUBLISHED Published: 2025-01-17T20:00:10.600Z Last Updated: 2025-02-12T20:31:25.702Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: code-projects Products: Car Rental Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in code-projects Car Rental Management System 1.0. This issue affects some unknown processing of the file /admin/manage-pages.php. The manipulation of the argument pgdetails leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
y. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292421 - https://vuldb.com/?ctiid.292421 - https://vuldb.com/?submit.479864 - https://github.com/aaryan-11-x/My-CVEs/blob/main/CVE-2025-0537.md - https://code-projects.org/
CVE ID: CVE-2025-0538 State: PUBLISHED Published: 2025-01-17T20:31:04.725Z Last Updated: 2025-01-18T08:47:48.867Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: code-projects Products: Tourism Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in code-projects Tourism Management System 1.0. Affected is an unknown function of the file /admin/manage-pages.php. The manipulation of the argument pgedetails leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292422 - https://vuldb.com/?ctiid.292422 - https://vuldb.com/?submit.479895 - https://github.com/aaryan-11-x/My-CVEs/blob/main/CVE-2025-0538.md - https://code-projects.org/
CVE ID: CVE-2025-0539 State: PUBLISHED Published: 2025-04-10T05:20:38.264Z Last Updated: 2025-04-15T20:25:25.322Z Vendors: Octopus Deploy Products: Octopus Server Problem Types: Server Side Request Forgery Description: In affected Microsoft Windows versions of Octopus Deploy, the server can be coerced into sending server-side requests that contain authentication material allowing a suitably positioned attacker to compromise the account running Octopus Server and potentially the host infrastructure itself. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://advisories.octopus.com/post/2025/sa2025-06
CVE ID: CVE-2025-0540 State: PUBLISHED Published: 2025-01-17T21:00:17.400Z Last Updated: 2025-01-17T21:17:31.754Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Tailoring Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /expadd.php. The manipulation of the argument expcat leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292432 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292432 - https://vuldb.com/?ctiid.292432 - https://vuldb.com/?submit.480063 - https://github.com/magic2353112890/cve/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-0541 State: PUBLISHED Published: 2025-01-17T21:31:05.006Z Last Updated: 2025-01-17T21:43:06.350Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Codezips Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/edit_member.php. The manipulation of the argument name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
blic and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292433 - https://vuldb.com/?ctiid.292433 - https://vuldb.com/?submit.480220 - https://github.com/nbeisss/CVE/issues/1
CVE ID: CVE-2025-0542 State: PUBLISHED Published: 2025-01-25T16:15:09.526Z Last Updated: 2025-02-12T20:01:14.392Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: G DATA CyberDefense AG Products: G DATA Management Server Problem Types: CWE-276, CWE-22 Description: Local privilege escalation due to incorrect assignment of privileges of temporary files in the update mechanism of G DATA Management Server. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing a crafted ZIP archive in a globally writable directory, which gets unpacked in the context of SYSTEM and results in arbitrary file write. Addition
globally writable directory, which gets unpacked in the context of SYSTEM and results in arbitrary file write. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nullby73/security-advisories/tree/main/CVE-2025-0542
CVE ID: CVE-2025-0543 State: PUBLISHED Published: 2025-01-25T16:17:46.634Z Last Updated: 2025-02-05T18:23:40.680Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: G DATA CyberDefense AG Products: G DATA Security Client Problem Types: CWE-276 Description: Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to directories. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing an arbitrary executable in a globally writable directory resulting in execution by the SetupSVC.exe service in the context of SYSTEM. Additional Analyst Notes: - CISA ADP Vulnrichment: R
in execution by the SetupSVC.exe service in the context of SYSTEM. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nullby73/security-advisories/tree/main/CVE-2025-0543
CVE ID: CVE-2025-0545 State: PUBLISHED Published: 2025-02-24T13:43:48.167Z Last Updated: 2025-02-24T16:59:24.095Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Tekrom Technology Products: T-Soft E-Commerce Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting (XSS).This issue affects T-Soft E-Commerce: before v5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0041
CVE ID: CVE-2025-0546 State: PUBLISHED Published: 2025-09-17T11:42:42.358Z Last Updated: 2025-09-17T13:08:06.681Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Mevzuattr Software Products: MevzuatTR Problem Types: CWE-79, CWE-1021 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Restriction of Rendered UI Layers or Frames vulnerability in Mevzuattr Software MevzuatTR allows Phishing, iFrame Overlay, Clickjacking, Forceful Browsing. This issue needs high privileges. This issue affects MevzuatTR: before 12.02.2025. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.us
ue affects MevzuatTR: before 12.02.2025. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0269
CVE ID: CVE-2025-0547 State: PUBLISHED Published: 2025-09-18T08:59:04.983Z Last Updated: 2025-09-18T14:03:31.246Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Paraşüt Software Products: Bizmu Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Paraşüt Software Bizmu allows Cross-Site Scripting (XSS).This issue affects Bizmu: from 2.27.0 through 20250212. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0272
CVE ID: CVE-2025-0549 State: PUBLISHED Published: 2025-05-09T16:13:23.860Z Last Updated: 2025-05-09T19:58:30.277Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-288 Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.3 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2. A security vulnerability allows attackers to bypass Device OAuth flow protections, enabling authorization form submission through minimal user interaction. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/513996 - ht
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/513996 - https://hackerone.com/reports/2927555
CVE ID: CVE-2025-0554 State: PUBLISHED Published: 2025-01-18T05:33:48.811Z Last Updated: 2025-01-22T14:20:16.492Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: eteubert Products: Podlove Podcast Publisher Problem Types: CWE-79 Description: The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Feed Name value in version <= 4.1.25 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site install
y web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/39d41772-49f3-4bce-a170-cbe64ba99184?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3217075%40podlove-podcasting-plugin-for-wordpress&new=3217075%40podlove-podcasting-plugin-for-wordpress&sfp_email=&sfph_mail=
CVE ID: CVE-2025-0555 State: PUBLISHED Published: 2025-03-03T16:02:28.441Z Last Updated: 2025-03-04T16:50:43.845Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-79 Description: A Cross Site Scripting (XSS) vulnerability in GitLab-EE affecting all versions from 16.6 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1 allows an attacker to bypass security controls and execute arbitrary scripts in a users browser under specific conditions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/514004 - https://hackerone.com/reports/2939833
CVE ID: CVE-2025-0556 State: PUBLISHED Published: 2025-02-12T15:11:03.067Z Last Updated: 2025-02-12T15:33:35.788Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Progress Software Products: Telerik Report Server Problem Types: CWE-319 Description: In Progress® Telerik® Report Server, versions prior to 2025 Q1 (11.0.25.211) when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local network traffic sniffing. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.telerik.com/report-ser
k traffic sniffing. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.telerik.com/report-server/knowledge-base/kb-security-cleartext-transmission-cve-2025-0556
CVE ID: CVE-2025-0557 State: PUBLISHED Published: 2025-01-18T09:00:11.224Z Last Updated: 2025-01-21T21:13:51.371Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Hyland Products: Alfresco Community Edition, Alfresco Enterprise Edition Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in Hyland Alfresco Community Edition and Alfresco Enterprise Edition up to 6.2.2. This affects an unknown part of the file /share/s/ of the component URL Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0 is able
ate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292491 - https://vuldb.com/?ctiid.292491 - https://vuldb.com/?submit.474306
CVE ID: CVE-2025-0558 State: PUBLISHED Published: 2025-01-18T13:00:08.683Z Last Updated: 2025-01-21T21:13:26.030Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: TDuckCloud Products: tduck-platform Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in TDuckCloud tduck-platform up to 4.0. This vulnerability affects the function QueryProThemeRequest of the file src/main/java/com/tduck/cloud/form/request/QueryProThemeRequest.java. The manipulation of the argument color leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosur
otely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292492 - https://vuldb.com/?ctiid.292492 - https://vuldb.com/?submit.474613 - https://github.com/ggg48966/123123/blob/main/TDuckCloud.md
CVE ID: CVE-2025-0559 State: PUBLISHED Published: 2025-01-18T14:00:17.622Z Last Updated: 2025-01-21T21:03:41.680Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: Campcodes Products: School Management Software Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in Campcodes School Management Software 1.0. This issue affects some unknown processing of the file /create-id-card of the component Create Id Card Page. The manipulation of the argument ID Card Title leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA A
be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292493 - https://vuldb.com/?ctiid.292493 - https://vuldb.com/?submit.480306 - https://github.com/KhukuriRimal/Vulnerabilities/blob/main/CampCodes%20-%20School%20Management%20Software%20-%20Cross%20Site%20Scripting.pdf - https://www.campcodes.com/
CVE ID: CVE-2025-0560 State: PUBLISHED Published: 2025-01-18T15:00:17.416Z Last Updated: 2025-01-21T20:59:15.974Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: CampCodes Products: School Management Software Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /photo-gallery of the component Photo Gallery Page. The manipulation of the argument Description leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichm
k remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292494 - https://vuldb.com/?ctiid.292494 - https://vuldb.com/?submit.480688 - https://github.com/KhukuriRimal/Vulnerabilities/blob/main/CampCodes%20-%20School%20Management%20Software%20-%20Stored%20Cross%20Site%20Scripting.pdf - https://www.campcodes.com/
CVE ID: CVE-2025-0561 State: PUBLISHED Published: 2025-01-18T23:31:05.557Z Last Updated: 2025-01-21T20:35:01.934Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: itsourcecode Products: Farm Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in itsourcecode Farm Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-pig.php. The manipulation of the argument pigno leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292522 - https://v
d may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292522 - https://vuldb.com/?ctiid.292522 - https://vuldb.com/?submit.483396 - https://github.com/yunhai666/cve/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-0562 State: PUBLISHED Published: 2025-01-19T01:00:08.392Z Last Updated: 2025-01-21T20:31:08.238Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Codezips Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/health_status_entry.php. The manipulation of the argument usrid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.29
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292523 - https://vuldb.com/?ctiid.292523 - https://vuldb.com/?submit.484184 - https://github.com/LiuSir5211314/-sir/issues/1
CVE ID: CVE-2025-0563 State: PUBLISHED Published: 2025-01-19T01:31:04.830Z Last Updated: 2025-01-21T20:30:40.942Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Fantasy-Cricket Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Fantasy-Cricket 1.0. It has been classified as critical. Affected is an unknown function of the file /dash/update.php. The manipulation of the argument uname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292524 - https://vuldb
y be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292524 - https://vuldb.com/?ctiid.292524 - https://vuldb.com/?submit.484185 - https://github.com/LiuSir5211314/-sir/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-0564 State: PUBLISHED Published: 2025-01-19T03:31:05.727Z Last Updated: 2025-01-21T20:27:47.108Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Fantasy-Cricket Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Fantasy-Cricket 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /authenticate.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.29252
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292525 - https://vuldb.com/?ctiid.292525 - https://vuldb.com/?submit.484186 - https://github.com/LiuSir5211314/-sir/issues/3 - https://code-projects.org/
CVE ID: CVE-2025-0565 State: PUBLISHED Published: 2025-01-19T06:00:18.955Z Last Updated: 2025-01-21T15:13:00.335Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: n/a Products: ZZCMS Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.292526 - https://vuldb.com/?ctiid.292526 - https://vuldb.com/?submi
DP Vulnrichment: References: - https://vuldb.com/?id.292526 - https://vuldb.com/?ctiid.292526 - https://vuldb.com/?submit.484333 - https://github.com/En0t5/vul/blob/main/zzcms/zzcsm-sql-inject.md