Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-13485 State: PUBLISHED Published: 2025-11-21T00:02:06.452Z Last Updated: 2025-11-24T18:13:27.495Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Online File Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
n released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333085 - https://vuldb.com/?ctiid.333085 - https://vuldb.com/?submit.696405 - https://github.com/jaisurya-me/CVE/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-13499 State: PUBLISHED Published: 2025-11-21T06:03:52.020Z Last Updated: 2025-11-22T04:55:19.670Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Wireshark Foundation Products: Wireshark Problem Types: CWE-824 Description: Kafka dissector crash in Wireshark 4.6.0 and 4.4.0 to 4.4.10 allows denial of service Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2025-06.html - https://gitlab.com/wireshark/wireshark/-/issues/20823
CVE ID: CVE-2025-13502 State: PUBLISHED Published: 2025-11-25T08:02:26.022Z Last Updated: 2025-11-25T08:13:14.161Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-190 Description: A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow, leading to a UIProcess crash (DoS) via a crafted payload to the GLib remote inspector server. References: - https://access.redhat.com/security/cve/CVE-2025-13502 - https://bugzilla.redhat.com/show_bug.cgi?id=2416300
CVE ID: CVE-2025-13507 State: PUBLISHED Published: 2025-11-25T04:52:47.714Z Last Updated: 2025-11-25T04:52:47.714Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: MongoDB Inc. Products: MongoDB Server Problem Types: CWE-1284 Description: Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination. This issue impacts MongoDB Server v7.0 versions prior to 7.0.26, v8.0 versions prior to 8.0.16 and MongoDB server v8.2 versions prior to 8.2.1. References: - https://jira.mongodb.org/browse/SERVER-108565
CVE ID: CVE-2025-13511 State: REJECTED Published: N/A Last Updated: 2025-11-24T16:17:06.894Z Description: No description available.
CVE ID: CVE-2025-13524 State: PUBLISHED Published: 2025-11-21T20:03:54.445Z Last Updated: 2025-11-21T20:58:11.225Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: AWS Products: Wickr, Wickr Gov, Wickr Enterprise Problem Types: CWE-404 Description: Improper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call participant to continue receiving audio input from another user after they close their call window. This issue occurs under certain conditions, which require the affected user to take a particular action within the application To mitigate this issue, users should upgrade AWS Wic
he affected user to take a particular action within the application To mitigate this issue, users should upgrade AWS Wickr, Wickr Gov and Wickr Enterprise desktop version to version 6.62.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://aws.amazon.com/security/security-bulletins/AWS-2025-029/ - https://docs.aws.amazon.com/wickr/latest/enterpriseadminguide/clients-release-notes-6.62.html
CVE ID: CVE-2025-13526 State: PUBLISHED Published: 2025-11-22T11:08:38.686Z Last Updated: 2025-11-24T19:35:47.203Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: walterpinem Products: OneClick Chat to Order Problem Types: CWE-200 Description: The OneClick Chat to Order plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0.8 via the 'wa_order_thank_you_override' function due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to view sensitive customer information including names, email addresses, phone numbers, billing/shipping addresses, order contents
nsitive customer information including names, email addresses, phone numbers, billing/shipping addresses, order contents, and payment methods by simply changing the order ID in the URL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/547a0c73-044e-49ba-9bec-4f80b41b8ea2?source=cve - https://plugins.trac.wordpress.org/browser/oneclick-whatsapp-order/trunk/includes/buttons/wa-order-thank-you.php#L126 - https://plugins.trac.wordpress.org/changeset/3391625/
CVE ID: CVE-2025-13541 State: REJECTED Published: N/A Last Updated: 2025-11-24T14:34:47.216Z Description: No description available.
CVE ID: CVE-2025-13544 State: PUBLISHED Published: 2025-11-23T09:02:06.478Z Last Updated: 2025-11-23T09:02:06.478Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: ashraf-kabir Products: travel-agency Problem Types: CWE-434, CWE-284 Description: A weakness has been identified in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected is an unknown function of the file /customer_register.php. Executing manipulation can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited. This product takes the approach of rolling releases to provide continio
available to the public and could be exploited. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way. References: - https://vuldb.com/?id.333311 - https://vuldb.com/?ctiid.333311 - https://vuldb.com/?submit.690975 - https://github.com/www223-ai/CVE/blob/main/travel-File%20Upload.docx
CVE ID: CVE-2025-13545 State: PUBLISHED Published: 2025-11-23T10:02:05.173Z Last Updated: 2025-11-24T18:19:24.988Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: ashraf-kabir Products: travel-agency Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected by this vulnerability is an unknown functionality of the file /admin_area/index.php. The manipulation of the argument edit_pack leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Continious delivery with rolling releases is used
ted remotely. The exploit has been disclosed publicly and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333312 - https://vuldb.com/?ctiid.333312 - https://vuldb.com/?submit.690978 - https://github.com/www223-ai/CVE/blob/main/travel-sql.docx
CVE ID: CVE-2025-13546 State: PUBLISHED Published: 2025-11-23T10:32:06.417Z Last Updated: 2025-11-24T16:38:25.135Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: ashraf-kabir Products: travel-agency Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected by this issue is some unknown functionality of the file /results.php of the component Search. The manipulation of the argument user_query results in sql injection. The attack can be launched remotely. The exploit is now public and may be used. This product does not use versioning. This is why information abou
remotely. The exploit is now public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333313 - https://vuldb.com/?ctiid.333313 - https://vuldb.com/?submit.691466 - https://github.com/www223-ai/CVE/blob/main/travel-sql2.docx
CVE ID: CVE-2025-13547 State: PUBLISHED Published: 2025-11-23T11:02:06.826Z Last Updated: 2025-11-24T16:27:25.254Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-822K, DWR-M920 Problem Types: CWE-119 Description: A flaw has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This affects an unknown part of the file /boafrm/formDdns. This manipulation of the argument submit-url causes memory corruption. The attack may be initiated remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333314 - https://vuldb.com/?ctiid.333314 - https://
Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333314 - https://vuldb.com/?ctiid.333314 - https://vuldb.com/?submit.693758 - https://vuldb.com/?submit.695428 - https://github.com/QIU-DIE/CVE/issues/30 - https://github.com/QIU-DIE/CVE/issues/42 - https://www.dlink.com/
CVE ID: CVE-2025-13548 State: PUBLISHED Published: 2025-11-23T11:32:06.522Z Last Updated: 2025-11-24T16:26:33.361Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-822K, DWR-M920 Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This vulnerability affects unknown code of the file /boafrm/formFirewallAdv. Such manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.33
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333315 - https://vuldb.com/?ctiid.333315 - https://vuldb.com/?submit.693767 - https://vuldb.com/?submit.695433 - https://github.com/QIU-DIE/CVE/issues/31 - https://github.com/QIU-DIE/CVE/issues/43 - https://www.dlink.com/
CVE ID: CVE-2025-13549 State: PUBLISHED Published: 2025-11-23T12:02:07.230Z Last Updated: 2025-11-24T16:25:43.144Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-822K Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in D-Link DIR-822K 1.00. This issue affects the function sub_455524 of the file /boafrm/formNtp. Performing manipulation of the argument submit-url results in buffer overflow. Remote exploitation of the attack is possible. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333316 - https://vuldb.com/?ctiid.333316 - https:
st Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333316 - https://vuldb.com/?ctiid.333316 - https://vuldb.com/?submit.693776 - https://github.com/QIU-DIE/CVE/issues/32 - https://www.dlink.com/
CVE ID: CVE-2025-13550 State: PUBLISHED Published: 2025-11-23T12:32:06.524Z Last Updated: 2025-11-24T16:25:06.562Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-822K, DWR-M920 Problem Types: CWE-120, CWE-119 Description: A vulnerability was determined in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. Impacted is an unknown function of the file /boafrm/formVpnConfigSetup. Executing manipulation of the argument submit-url can lead to buffer overflow. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.
y disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333317 - https://vuldb.com/?ctiid.333317 - https://vuldb.com/?submit.693777 - https://vuldb.com/?submit.695437 - https://github.com/QIU-DIE/CVE/issues/33 - https://github.com/QIU-DIE/CVE/issues/47 - https://www.dlink.com/
CVE ID: CVE-2025-13551 State: PUBLISHED Published: 2025-11-23T13:02:06.976Z Last Updated: 2025-11-24T16:24:00.939Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-822K, DWR-M920 Problem Types: CWE-120, CWE-119 Description: A vulnerability was identified in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The affected element is an unknown function of the file /boafrm/formWanConfigSetup. The manipulation of the argument submit-url leads to buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333318 - https://vuldb.com/?ctiid.333318 - https://vuldb.com/?submit.693785 - https://vuldb.com/?submit.695436 - https://github.com/QIU-DIE/CVE/issues/35 - https://github.com/QIU-DIE/CVE/issues/46 - https://www.dlink.com/
CVE ID: CVE-2025-13552 State: PUBLISHED Published: 2025-11-23T13:32:06.358Z Last Updated: 2025-11-24T16:23:10.954Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-822K, DWR-M920 Problem Types: CWE-120, CWE-119 Description: A security flaw has been discovered in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The impacted element is an unknown function of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url results in buffer overflow. The attack may be performed from remote. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
n released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333319 - https://vuldb.com/?ctiid.333319 - https://vuldb.com/?submit.693803 - https://vuldb.com/?submit.695434 - https://github.com/QIU-DIE/CVE/issues/36 - https://github.com/QIU-DIE/CVE/issues/44 - https://www.dlink.com/
CVE ID: CVE-2025-13553 State: PUBLISHED Published: 2025-11-23T14:02:06.345Z Last Updated: 2025-11-24T16:22:14.239Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DWR-M920 Problem Types: CWE-120, CWE-119 Description: A weakness has been identified in D-Link DWR-M920 1.1.50. This affects the function sub_41C7FC of the file /boafrm/formPinManageSetup. This manipulation of the argument submit-url causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333320 - https://vuldb.c
ploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333320 - https://vuldb.com/?ctiid.333320 - https://vuldb.com/?submit.695435 - https://github.com/QIU-DIE/CVE/issues/45 - https://www.dlink.com/
CVE ID: CVE-2025-13554 State: PUBLISHED Published: 2025-11-23T15:02:07.067Z Last Updated: 2025-11-24T16:21:27.937Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Supplier Management System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /index.php of the component Login. Such manipulation of the argument txtUsername leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333321 - https://vuldb.com/?ctiid.333321 - https://vuldb.com/?submit.696515 - https://github.com/arpcyber060/CVE/issues/3 - https://www.campcodes.com/
CVE ID: CVE-2025-13555 State: PUBLISHED Published: 2025-11-23T15:32:07.845Z Last Updated: 2025-11-24T17:55:59.770Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: School File Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing manipulation of the argument stud_no results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333322 - https:
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333322 - https://vuldb.com/?ctiid.333322 - https://vuldb.com/?submit.696516 - https://github.com/arpcyber070/CVE/issues/4 - https://www.campcodes.com/
CVE ID: CVE-2025-13556 State: PUBLISHED Published: 2025-11-23T16:02:05.927Z Last Updated: 2025-11-24T16:20:46.173Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Polling System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in Campcodes Online Polling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/checklogin.php. Executing manipulation of the argument myusername can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333323 - https:/
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333323 - https://vuldb.com/?ctiid.333323 - https://vuldb.com/?submit.696614 - https://github.com/ProgramShowMaker/CVE/issues/2 - https://www.campcodes.com/
CVE ID: CVE-2025-13557 State: PUBLISHED Published: 2025-11-23T16:32:07.421Z Last Updated: 2025-11-24T14:37:40.729Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Polling System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Campcodes Online Polling System 1.0. Affected by this issue is some unknown functionality of the file /registeracc.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333324 - https://
nd may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333324 - https://vuldb.com/?ctiid.333324 - https://vuldb.com/?submit.696615 - https://github.com/ProgramShowMaker/CVE/issues/3 - https://www.campcodes.com/
CVE ID: CVE-2025-13558 State: PUBLISHED Published: 2025-11-25T04:37:59.997Z Last Updated: 2025-11-25T04:37:59.997Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: pr-gateway Products: Blog2Social: Social Media Auto Post & Scheduler Problem Types: CWE-862 Description: The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'deleteUserCcDraftPost' function in all versions up to, and including, 8.7.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change the status of arbitrary posts to trash. References: -
cated attackers, with Subscriber-level access and above, to change the status of arbitrary posts to trash. References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/61b590f5-7854-42f7-b5e2-e6feaaf03a73?source=cve - https://plugins.trac.wordpress.org/browser/blog2social/tags/8.7.0/includes/Ajax/Post.php#L1858 - https://plugins.trac.wordpress.org/browser/blog2social/trunk/includes/Ajax/Post.php?rev=3401934#L1867
CVE ID: CVE-2025-13559 State: PUBLISHED Published: 2025-11-25T04:38:01.073Z Last Updated: 2025-11-25T04:38:01.073Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: venusweb Products: EduKart Pro Problem Types: CWE-269 Description: The EduKart Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3. This is due to the 'edukart_pro_register_user_front_end' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'administrator' role during registration and gain administrator access to the site. References: - https://www.wordfence.com
ministrator' role during registration and gain administrator access to the site. References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d3a5be68-8073-48b0-a536-bb3a05e83dda?source=cve - https://themeforest.net/item/edit-edukart-online-courses-education-lms-theme/52094805
CVE ID: CVE-2025-13560 State: PUBLISHED Published: 2025-11-23T17:02:06.082Z Last Updated: 2025-11-24T14:36:52.595Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Company Website CMS Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Company Website CMS 1.0. This affects an unknown part of the file /admin/reset-password.php. The manipulation of the argument email results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333325 - https://vuldb.com/?ctiid.333325
nal Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333325 - https://vuldb.com/?ctiid.333325 - https://vuldb.com/?submit.696637 - https://github.com/miwangdemaoxianzhe/CVE/issues/1 - https://www.sourcecodester.com/
CVE ID: CVE-2025-13561 State: PUBLISHED Published: 2025-11-23T17:32:05.662Z Last Updated: 2025-11-24T21:08:22.099Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Company Website CMS Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.php. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333326 - https
d may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.333326 - https://vuldb.com/?ctiid.333326 - https://vuldb.com/?submit.696684 - https://github.com/miwangdemaoxianzhe/CVE/issues/2 - https://www.sourcecodester.com/