Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-10789 State: PUBLISHED Published: 2025-09-22T08:02:06.956Z Last Updated: 2025-09-22T15:49:46.096Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Hotel Reservation System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteslide.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.
cly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325146 - https://vuldb.com/?ctiid.325146 - https://vuldb.com/?submit.653881 - https://gold-textbook-8ff.notion.site/Online-Hotel-Reservation-System-In-PHP-With-Source-Code-deleteslide-php-sql-injection-26d85e97f353807585d7e600b31d339e - https://www.sourcecodester.com/
CVE ID: CVE-2025-10790 State: PUBLISHED Published: 2025-09-22T08:32:06.146Z Last Updated: 2025-09-22T13:39:29.364Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Simple Forum Discussion System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in SourceCodester Simple Forum Discussion System 1.0. This affects an unknown function of the file /ajax.php?action=save_category. The manipulation of the argument Description results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325147 - https://vuldb.com/?ctiid.325147 - https://vuldb.com/?submit.653991 - https://github.com/qcycop0101-hash/CVE/issues/26 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10791 State: PUBLISHED Published: 2025-09-22T09:02:06.548Z Last Updated: 2025-09-22T13:44:23.646Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Bidding System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administrator/index.php. This manipulation of the argument aduser causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
o the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325148 - https://vuldb.com/?ctiid.325148 - https://vuldb.com/?submit.654046 - https://github.com/K1nakoo/cve/blob/main/26/report.md - https://code-projects.org/
CVE ID: CVE-2025-10792 State: PUBLISHED Published: 2025-09-22T09:32:07.403Z Last Updated: 2025-09-22T12:37:18.691Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-513 Problem Types: CWE-120, CWE-119 Description: A security vulnerability has been detected in D-Link DIR-513 A1FW110. Affected is an unknown function of the file /goform/formWPS. Such manipulation of the argument webpage leads to buffer overflow. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: R
ly affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325149 - https://vuldb.com/?ctiid.325149 - https://vuldb.com/?submit.654049 - https://github.com/panda666-888/vuls/blob/main/d-link/dir-513/formWPS.md - https://github.com/panda666-888/vuls/blob/main/d-link/dir-513/formWPS.md#poc - https://www.dlink.com/
CVE ID: CVE-2025-10793 State: PUBLISHED Published: 2025-09-22T10:02:06.955Z Last Updated: 2025-09-22T12:33:37.665Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: E-Commerce Website Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/admin_account_delete.php. Performing manipulation of the argument user_id results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325150 - https://vuldb.com/?ctiid.325150 - https://vuldb.com/?submit.654058 - https://github.com/K1nakoo/cve/blob/main/31/report.md - https://code-projects.org/
CVE ID: CVE-2025-10794 State: PUBLISHED Published: 2025-09-22T10:32:09.461Z Last Updated: 2025-09-22T12:10:10.971Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Car Rental Project Problem Types: CWE-79, CWE-94 Description: A flaw has been found in PHPGurukul Car Rental Project 3.0. Affected by this issue is some unknown functionality of the file /carrental/search.php. Executing manipulation of the argument autofocus can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325151 - http
ed and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325151 - https://vuldb.com/?ctiid.325151 - https://vuldb.com/?submit.654067 - https://github.com/tddgns/cve/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-10795 State: PUBLISHED Published: 2025-09-22T11:02:06.405Z Last Updated: 2025-09-22T11:43:15.807Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Bidding System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Online Bidding System 1.0. This affects an unknown part of the file /administrator/bidupdate.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325152 - https://vuldb.c
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325152 - https://vuldb.com/?ctiid.325152 - https://vuldb.com/?submit.654077 - https://github.com/jackhong1236/cve_0/blob/main/12/tmp25/report.md - https://code-projects.org/
CVE ID: CVE-2025-10796 State: PUBLISHED Published: 2025-09-22T11:32:06.738Z Last Updated: 2025-09-22T13:05:17.445Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Hostel Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Hostel Management System 1.0. This vulnerability affects unknown code of the file /justines/admin/login.php. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325153 - https://vuld
ld be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325153 - https://vuldb.com/?ctiid.325153 - https://vuldb.com/?submit.654090 - https://github.com/lishuyuan12138/CVE/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-10797 State: PUBLISHED Published: 2025-09-22T12:02:06.765Z Last Updated: 2025-09-22T12:43:31.675Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Hostel Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in code-projects Hostel Management System 1.0. This issue affects some unknown processing of the file /justines/index.php. This manipulation of the argument log_email causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325154 -
sed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325154 - https://vuldb.com/?ctiid.325154 - https://vuldb.com/?submit.654091 - https://github.com/Waibibabo1239/CVE/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-10798 State: PUBLISHED Published: 2025-09-22T12:32:06.610Z Last Updated: 2025-09-22T13:39:35.349Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Hostel Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in code-projects Hostel Management System 1.0. Impacted is an unknown function of the file /justines/admin/mod_roomtype/index.php?view=view. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3251
available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325155 - https://vuldb.com/?ctiid.325155 - https://vuldb.com/?submit.654092 - https://github.com/598600/CVE/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-10799 State: PUBLISHED Published: 2025-09-22T13:02:07.601Z Last Updated: 2025-09-22T13:36:56.585Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Hostel Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in code-projects Hostel Management System 1.0. The affected element is an unknown function of the file /justines/admin/mod_reservation/index.php?view=view. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vul
is possible. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325156 - https://vuldb.com/?ctiid.325156 - https://vuldb.com/?submit.654104 - https://github.com/yangzhenyu6/CVE/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-10800 State: PUBLISHED Published: 2025-09-22T13:32:09.387Z Last Updated: 2025-09-22T13:58:56.020Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Online Discussion Forum Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in itsourcecode Online Discussion Forum 1.0. The impacted element is an unknown function of the file /index.php. Executing manipulation of the argument email/password can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
e to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325157 - https://vuldb.com/?ctiid.325157 - https://vuldb.com/?submit.654152 - https://vuldb.com/?submit.654153 - https://github.com/JunGu-W/cve/issues/14 - https://github.com/JunGu-W/cve/issues/15 - https://itsourcecode.com/
CVE ID: CVE-2025-10801 State: PUBLISHED Published: 2025-09-22T14:02:06.995Z Last Updated: 2025-09-22T14:17:10.092Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Pet Grooming Management Software Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown function of the file /admin/edit_tax.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
it has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325158 - https://vuldb.com/?ctiid.325158 - https://vuldb.com/?submit.654161 - https://vuldb.com/?submit.655882 - https://github.com/YunyiLiu31/sql-injection-vulnerability - https://www.sourcecodester.com/
CVE ID: CVE-2025-10802 State: PUBLISHED Published: 2025-09-22T14:32:05.759Z Last Updated: 2025-09-22T14:50:39.749Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Bidding System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in code-projects Online Bidding System 1.0. Affected is an unknown function of the file /administrator/remove.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325160 - https://vuldb.com/?ctiid.3251
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325160 - https://vuldb.com/?ctiid.325160 - https://vuldb.com/?submit.654164 - https://github.com/peri0d/my_cve/blob/main/ONLINE-BIDDING-SYSTEM-Project-V1.0-remove.php-SQL-injection.md - https://code-projects.org/
CVE ID: CVE-2025-10803 State: PUBLISHED Published: 2025-09-22T15:02:07.142Z Last Updated: 2025-09-22T17:18:36.553Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC23 Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in Tenda AC23 up to 16.03.07.52. Affected by this vulnerability is the function sscanf of the file /goform/SetPptpServerCfg of the component HTTP POST Request Handler. Such manipulation of the argument startIp leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
it has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325161 - https://vuldb.com/?ctiid.325161 - https://vuldb.com/?submit.654237 - https://github.com/lin-3-start/lin-cve/blob/main/Tenda%20AC23-3/Tenda%20AC23%20Buffer%20overflow.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-10804 State: PUBLISHED Published: 2025-09-22T15:32:06.314Z Last Updated: 2025-09-22T17:11:09.097Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Beauty Parlor Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Online Beauty Parlor Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/add-customer.php. Performing manipulation of the argument mobilenum results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
y. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325162 - https://vuldb.com/?ctiid.325162 - https://vuldb.com/?submit.654373 - https://github.com/fubxx/CVE/blob/main/Online%20Beauty%20Parlor%20Management%20System%20SQL%20Injection%20on%20add-customer.php.md - https://www.campcodes.com/
CVE ID: CVE-2025-10805 State: PUBLISHED Published: 2025-09-22T16:02:05.937Z Last Updated: 2025-09-22T16:41:46.883Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Beauty Parlor Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in Campcodes Online Beauty Parlor Management System 1.0. This affects an unknown part of the file /admin/add-services.php. Executing manipulation of the argument sername can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
n publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325163 - https://vuldb.com/?ctiid.325163 - https://vuldb.com/?submit.654374 - https://github.com/fubxx/CVE/blob/main/Online%20Beauty%20Parlor%20Management%20System%20SQL%20Injection%20on%20add-services.php.md - https://www.campcodes.com/
CVE ID: CVE-2025-10806 State: PUBLISHED Published: 2025-09-22T16:32:06.381Z Last Updated: 2025-09-23T13:51:18.135Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Beauty Parlor Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
y. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325164 - https://vuldb.com/?ctiid.325164 - https://vuldb.com/?submit.654375 - https://github.com/fubxx/CVE/blob/main/Online%20Beauty%20Parlor%20Management%20System%20SQL%20Injection%20on%20bwdates-reports-details.php%20.md - https://www.campcodes.com/
CVE ID: CVE-2025-10807 State: PUBLISHED Published: 2025-09-22T17:02:07.877Z Last Updated: 2025-09-23T13:50:42.071Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Beauty Parlor Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. This issue affects some unknown processing of the file /admin/edit-customer-detailed.php. The manipulation of the argument editid results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: R
. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325165 - https://vuldb.com/?ctiid.325165 - https://vuldb.com/?submit.654376 - https://github.com/fubxx/CVE/blob/main/Online%20Beauty%20Parlor%20Management%20System%20SQL%20Injection%20on%20edit-customer-detailed.php%20.md - https://www.campcodes.com/
CVE ID: CVE-2025-10808 State: PUBLISHED Published: 2025-09-22T17:32:06.241Z Last Updated: 2025-10-15T16:01:41.297Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Farm Management System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in Campcodes Farm Management System 1.0. Impacted is an unknown function of the file /uploadProduct.php. This manipulation of the argument Type causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325166 - https:
uld be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325166 - https://vuldb.com/?ctiid.325166 - https://vuldb.com/?submit.654382 - https://github.com/EvnYeung/cve/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-10809 State: PUBLISHED Published: 2025-09-22T18:02:06.971Z Last Updated: 2025-09-22T18:23:27.412Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Learning Management System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. The affected element is an unknown function of the file /admin/department.php. Such manipulation of the argument d leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
en disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325167 - https://vuldb.com/?ctiid.325167 - https://vuldb.com/?submit.654434 - https://vuldb.com/?submit.657034 - https://github.com/luyisi-7/CVE/issues/2 - https://www.campcodes.com/
CVE ID: CVE-2025-10810 State: PUBLISHED Published: 2025-09-22T18:32:06.813Z Last Updated: 2025-09-22T19:57:30.193Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Learning Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in Campcodes Online Learning Management System 1.0. The impacted element is an unknown function of the file /admin/edit_user.php. Performing manipulation of the argument firstname results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325168 - https://vuldb.com/?ctiid.325168 - https://vuldb.com/?submit.654435 - https://github.com/luyisi-7/CVE/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-10811 State: PUBLISHED Published: 2025-09-22T19:02:06.681Z Last Updated: 2025-09-22T19:54:55.158Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Hostel Management System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in code-projects Hostel Management System 1.0. This affects an unknown function of the file /justines/admin/mod_comments/index.php?view=view. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.32516
published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325169 - https://vuldb.com/?ctiid.325169 - https://vuldb.com/?submit.654436 - https://github.com/yihaofuweng/cve/issues/27 - https://code-projects.org/
CVE ID: CVE-2025-10812 State: PUBLISHED Published: 2025-09-22T19:32:05.935Z Last Updated: 2025-09-22T19:52:28.555Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Hostel Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Hostel Management System 1.0. This impacts an unknown function of the file /justines/admin/mod_amenities/index.php?view=view. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325170 - https://vuldb.com/?ctiid.325170 - https://vuldb.com/?submit.654437 - https://github.com/yihaofuweng/cve/issues/28 - https://code-projects.org/