Skip to main content
CVE-2025-51653 Jul 14, 17:15 MEDIUM POC This Month

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_ct.php.

PHP SQLi Semcms Sem Cms
NVD GitHub
CVSS 3.1
5.4
EPSS
0.0%
CVE-2025-51652 Jul 14, 17:15 MEDIUM POC This Month

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Categories.php.

PHP SQLi Semcms Sem Cms
NVD GitHub
CVSS 3.1
5.4
EPSS
0.0%
CVE-2025-53824 Jul 14, 23:15 MEDIUM POC PATCH This Month

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the editar_permissoes.php endpoint of the WeGIA application prior to version 3.4.4. This vulnerability allows attackers to inject malicious scripts in the msg_c parameter. Version 3.4.4 fixes the issue.

PHP XSS Wegia
NVD GitHub
CVSS 3.1
5.4
EPSS
0.0%
CVE-2025-53835 Jul 14, 23:15 CRITICAL PATCH Act Now

A cross-site scripting vulnerability in version 5.4.5 and (CVSS 9.0). Critical severity with potential for significant impact on affected systems. Vendor patch is available.

XSS Xwiki
NVD GitHub
CVSS 3.1
9.0
EPSS
1.6%
CVE-2025-7565 Jul 14, 04:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in LB-LINK BL-AC3600 up to 1.0.22. This affects the function geteasycfg of the file /cgi-bin/lighttpd.cgi of the component Web Management Interface. The manipulation of the argument Password leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Information Disclosure Bl Ac3600 Firmware Lb Link
NVD GitHub VulDB
CVSS 3.1
5.3
EPSS
0.1%
CVE-2025-7573 Jul 14, 05:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in LB-LINK BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800, BL-AX5400P and BL-WR9000 up to 20250702. This issue affects the function bs_GetManPwd in the library libblinkapi.so of the file /cgi-bin/lighttpd.cgi. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Information Disclosure
NVD GitHub VulDB
CVSS 3.1
5.3
EPSS
0.0%
CVE-2025-7572 Jul 14, 05:15 MEDIUM POC This Month

A vulnerability classified as critical was found in LB-LINK BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800, BL-AX5400P and BL-WR9000 up to 20250702. This vulnerability affects the function bs_GetHostInfo in the library libblinkapi.so of the file /cgi-bin/lighttpd.cgi. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Information Disclosure
NVD GitHub VulDB
CVSS 3.1
5.3
EPSS
0.0%
CVE-2025-7619 Jul 14, 04:15 HIGH This Week

CVE-2025-7619 is an Arbitrary File Write vulnerability in BatchSignCS, a background Windows application by WellChoose, that allows remote attackers with low privileges to write arbitrary files to any filesystem path via malicious website visits, potentially enabling arbitrary code execution. The vulnerability has a CVSS score of 8.8 (High) and requires user interaction (visiting a malicious site) but no elevated privileges; real-world exploitability depends on KEV listing status and public POC availability, which are not confirmed in the provided data.

Windows RCE Microsoft
NVD
CVSS 3.1
8.8
EPSS
1.0%
CVE-2025-7620 Jul 14, 04:15 HIGH This Week

CVE-2025-7620 is a critical Remote Code Execution vulnerability in Digitware System Integration Corporation's cross-browser document creation component that allows unauthenticated attackers to execute arbitrary code on victim systems through malicious websites. The vulnerability exploits unsafe download and execution mechanisms, requiring only user interaction (visiting a malicious site) with no special privileges needed. With a CVSS score of 8.8 (High) and network-based attack vector, this poses significant risk to organizations deploying this component, particularly if actively exploited in the wild or if public exploits become available.

RCE
NVD
CVSS 3.1
8.8
EPSS
0.1%
CVE-2025-53689 Jul 14, 10:15 HIGH PATCH This Week

Apache Jackrabbit versions prior to 2.23.2 contain blind XXE (XML External Entity) vulnerabilities in jackrabbit-spi-commons and jackrabbit-core components due to unsafe XML document parsing when loading privilege definitions. An authenticated attacker with low privileges can exploit this to achieve high-impact confidentiality, integrity, and availability compromise. The vulnerability requires user authentication (PR:L) but has no interaction requirement and affects all systems regardless of scope.

Apache Java Information Disclosure XXE Red Hat +1
NVD GitHub
CVSS 3.1
8.8
EPSS
0.1%
CVE-2024-26293 Jul 14, 10:15 HIGH PATCH This Week

A path traversal vulnerability (CVSS 8.7). High severity vulnerability requiring prompt remediation.

Authentication Bypass Path Traversal
NVD
CVSS 4.0
8.7
EPSS
0.1%
CVE-2025-53821 Jul 14, 23:15 MEDIUM POC PATCH This Month

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. An Open Redirect vulnerability exists in the web application prior to version 3.4.5. The control.php endpoint allows to specify an arbitrary URL via the `nextPage` parameter, leading to an uncontrolled redirection. Version 3.4.5 contains a fix for the issue.

PHP Open Redirect Wegia
NVD GitHub
CVSS 3.1
4.7
EPSS
0.0%
CVE-2025-53623 Jul 14, 20:15 HIGH PATCH This Week

CVE-2025-53623 is an arbitrary code execution vulnerability in the Job Iteration API's CsvEnumerator class affecting versions prior to 1.11.0. An unauthenticated remote attacker can execute arbitrary system commands by supplying malicious input to CSV file processing methods, particularly the count_of_rows_in_file method, potentially leading to complete system compromise. The vulnerability has a CVSS score of 8.1 indicating high severity with network-accessible attack vector and no privilege requirements.

RCE Information Disclosure Ruby
NVD GitHub
CVSS 4.0
8.1
EPSS
0.2%
CVE-2024-51768 Jul 14, 11:15 HIGH PATCH This Week

CVE-2024-51768 is a remote code execution vulnerability in HPE AutoPass License Server (APLS) versions prior to 9.17, stemming from unsafe deserialization in the embedded HSQLDB database library. An authenticated attacker with local network access can execute arbitrary code with the privileges of the APLS service, potentially leading to complete system compromise. The vulnerability has a CVSS score of 8.0 and represents a significant risk to organizations using affected APLS versions, particularly given the authentication requirement is modest (PR:L) and the attack complexity is low.

RCE Java HP Autopass License Server Hpe
NVD
CVSS 3.1
8.0
EPSS
0.4%
CVE-2025-53819 Jul 14, 21:15 HIGH PATCH This Week

CVE-2025-53819 is a privilege escalation vulnerability in Nix 2.30.0 on macOS where package builds are incorrectly executed with root privileges instead of restricted build user accounts. This affects macOS systems running Nix 2.30.0, allowing local attackers with standard user privileges to execute arbitrary code with root-level access during package builds. The vulnerability was patched in Nix 2.30.1, and no public exploits or known workarounds are currently available, though the high CVSS score (7.9) reflects the severity of privilege escalation with potential system-wide impact.

Information Disclosure Apple macOS
NVD GitHub
CVSS 3.1
7.9
EPSS
0.0%
CVE-2025-25180 Jul 14, 02:15 HIGH This Week

CVE-2025-25180 is a privilege escalation vulnerability affecting GPU drivers that allows non-privileged users to conduct improper GPU system calls, enabling arbitrary writes to physical memory pages including kernel and driver memory. This vulnerability could allow local attackers to corrupt critical kernel data structures and alter system behavior, potentially leading to complete system compromise. The attack requires local access and low privilege level but has high impact across confidentiality, integrity, and availability.

Privilege Escalation Memory Corruption
NVD
CVSS 3.1
7.8
EPSS
0.0%
CVE-2025-53014 Jul 14, 18:15 LOW POC PATCH Monitor

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-0 and 6.9.13-26 have a heap buffer overflow in the `InterpretImageFilename` function. The issue stems from an off-by-one error that causes out-of-bounds memory access when processing format strings containing consecutive percent signs (`%%`). Versions 7.1.2-0 and 6.9.13-26 fix the issue.

Buffer Overflow Information Disclosure Debian Ubuntu Imagemagick
NVD GitHub
CVSS 3.1
3.7
EPSS
0.0%
CVE-2025-27582 Jul 14, 13:15 HIGH PATCH This Week

A privilege escalation vulnerability in One Identity Password Manager (CVSS 7.6). High severity vulnerability requiring prompt remediation.

Windows Privilege Escalation Microsoft
NVD
CVSS 3.1
7.6
EPSS
0.0%
CVE-2024-51770 Jul 14, 11:15 HIGH PATCH This Week

CVE-2024-51770 is an information disclosure vulnerability in HPE AutoPass License Server (APLS) versions prior to 9.17 that allows unauthenticated remote attackers to access sensitive information over the network. The vulnerability has a CVSS score of 7.5 with high confidentiality impact, enabling attackers to extract confidential data without requiring authentication, special privileges, or user interaction. The network-accessible nature of this information disclosure makes it a significant risk for organizations running vulnerable APLS versions.

Information Disclosure HP Autopass License Server Hpe
NVD
CVSS 3.1
7.5
EPSS
0.1%
CVE-2024-51769 Jul 14, 11:15 HIGH PATCH This Week

CVE-2024-51769 is an information disclosure vulnerability in HPE AutoPass License Server (APLS) versions prior to 9.17 that allows unauthenticated network attackers to access sensitive information without requiring user interaction. The vulnerability has a CVSS 3.1 score of 7.5 with a high confidentiality impact (CWE-200: Exposure of Sensitive Information to an Unauthorized Actor), making it a significant risk for organizations relying on APLS for license management across their HPE infrastructure.

Information Disclosure HP Autopass License Server Hpe
NVD
CVSS 3.1
7.5
EPSS
0.1%
CVE-2025-53643 Jul 14, 21:15 HIGH PATCH This Week

AIOHTTP versions prior to 3.12.14 contain a request smuggling vulnerability in the Python parser that fails to properly parse HTTP trailer sections, allowing attackers to bypass firewalls and proxy protections when the pure Python implementation is used. This vulnerability affects deployments running AIOHTTP without C extensions or with AIOHTTP_NO_EXTENSIONS enabled, enabling HTTP request smuggling attacks with high integrity impact. The vulnerability has a CVSS score of 7.5 (High) and is unauthenticated, network-accessible, and requires no user interaction.

Authentication Bypass Python Red Hat Aiohttp Suse
NVD GitHub
CVSS 3.1
7.5
EPSS
0.0%
CVE-2024-51767 Jul 14, 11:15 HIGH PATCH This Week

CVE-2024-51767 is an authentication bypass vulnerability in HPE AutoPass License Server (APLS) versions prior to 9.17 that allows unauthenticated remote attackers to gain unauthorized access to the application with limited impact on confidentiality, integrity, and availability. The vulnerability has a CVSS score of 7.3 (High) with a network-accessible attack vector requiring no privileges or user interaction, making it trivially exploitable. While specific KEV status and EPSS data are not provided in the available intelligence, the authentication bypass nature combined with the low attack complexity indicates this vulnerability likely poses a moderate-to-high real-world risk to unpatched HPE APLS installations.

Authentication Bypass Autopass License Server Hpe
NVD
CVSS 3.1
7.3
EPSS
0.0%
CVE-2024-26292 Jul 14, 09:15 HIGH PATCH This Week

A arbitrary file access vulnerability (CVSS 7.1) that allows an attacker. High severity vulnerability requiring prompt remediation.

Information Disclosure
NVD
CVSS 4.0
7.1
EPSS
0.1%
CVE-2025-1384 Jul 14, 00:15 HIGH This Week

CVE-2025-1384 is a least privilege violation (CWE-272) in the communication protocol between Omron NJ/NX-series Machine Automation Controllers and Sysmac Studio software that allows unauthenticated remote attackers to execute arbitrary code on affected controllers. The vulnerability affects industrial automation environments and enables complete compromise of controller functionality through unauthorized remote code execution. While the CVSS score of 7.0 indicates moderate-to-high severity, the network-accessible attack vector and lack of required privileges make this a significant threat to operational technology (OT) environments, particularly in manufacturing and critical infrastructure sectors.

Authentication Bypass Privilege Escalation RCE Siemens
NVD
CVSS 3.1
7.0
EPSS
0.0%
CVE-2025-7577 Jul 14, 06:15 LOW POC Monitor

Hard-coded root password in Teledyne FLIR FB-Series O and FH-Series ID cameras firmware version 1.3.2.16 allows remote attackers to gain unauthorized access to the device. Exploit code is publicly available, but the attack complexity is high and exploitation is difficult, resulting in only limited information disclosure. No evidence of active exploitation in the wild.

Authentication Bypass
NVD GitHub VulDB
CVSS 4.0
2.9
EPSS
0.0%
CVE-2025-7519 Jul 14, 14:15 MEDIUM PATCH This Month

A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an out-of-bounds write can be triggered. This issue can lead to a crash or other unexpected behavior, and arbitrary code execution is not discarded. To exploit this flaw, a high-privilege account is needed as it's required to place the malicious policy file properly.

RCE Buffer Overflow Memory Corruption Red Hat Enterprise Linux +1
NVD GitHub
CVSS 3.1
6.7
EPSS
0.0%
CVE-2025-7615 Jul 14, 16:15 LOW POC Monitor

Command injection in TOTOLINK T6 router firmware 4.1.5cu.748 allows remote attackers to execute arbitrary OS commands by manipulating the 'ip' parameter of the clearPairCfg function in the /cgi-bin/cstecgi.cgi HTTP POST handler. Exploit code is publicly available, but no active exploitation has been confirmed.

Command Injection T6 Firmware TOTOLINK
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
1.6%
CVE-2025-7614 Jul 14, 15:15 LOW POC Monitor

Command injection in TOTOLINK T6 firmware version 4.1.5cu.748 allows authenticated remote attackers to execute arbitrary OS commands via the ipAddr parameter in a crafted request to /cgi-bin/cstecgi.cgi. The vulnerability resides in the delDevice function of the HTTP POST handler, and publicly available exploit code exists. Although the vendor-reported CVSS 4.0 score is low (2.1), weaponizing this flaw can lead to full router compromise, making it critical for affected devices.

Command Injection T6 Firmware TOTOLINK
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
1.6%
CVE-2025-7613 Jul 14, 15:15 LOW POC Monitor

Command injection in TOTOLINK T6 firmware 4.1.5cu.748 allows remote authenticated attackers with low privileges to execute arbitrary system commands via the ip parameter of the CloudSrvVersionCheck function in /cgi-bin/cstecgi.cgi. A public proof-of-concept exploit is available, and while EPSS indicates a moderate 1.64% exploitation probability (82nd percentile), no active exploitation has been confirmed by CISA KEV at this time.

Command Injection T6 Firmware TOTOLINK
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
1.6%
CVE-2025-7552 Jul 14, 00:15 MEDIUM This Month

A remote code execution vulnerability in Dromara Northstar (CVSS 6.3). Remediation should follow standard vulnerability management procedures.

Java Information Disclosure
NVD VulDB
CVSS 3.1
6.3
EPSS
0.1%
CVE-2025-53834 Jul 14, 23:15 MEDIUM PATCH This Month

Caido is a web security auditing toolkit. A reflected cross-site scripting (XSS) vulnerability was discovered in Caido’s toast UI component in versions prior to 0.49.0. Toast messages may reflect unsanitized user input in certain tools such as Match&Replace and Scope. This could allow an attacker to craft input that results in arbitrary script execution. Version 0.49.0 fixes the issue.

XSS
NVD GitHub
CVSS 3.1
6.3
EPSS
0.1%
CVE-2025-7626 Jul 14, 17:15 LOW POC Monitor

Path traversal in YiJiuSmile kkFileViewOfficeEdit enables low-privilege remote attackers to read arbitrary files via the /onlinePreview endpoint. The vulnerability has a low CVSS 4.0 score and publicly available proof-of-concept code, but is not known to be actively exploited.

Path Traversal Kkfileviewofficeedit Yijiusmile
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.1%
CVE-2025-7628 Jul 14, 18:15 LOW POC Monitor

Path traversal in YiJiuSmile kkFileViewOfficeEdit enables remote low-privileged attackers to delete or modify files on the server via the /deleteFile endpoint. The flaw resides in the deleteFile function’s handling of the fileName argument, allowing directory traversal sequences. Public exploit code is available, though EPSS indicates low exploitation probability and it is not listed in CISA KEV.

Path Traversal Kkfileviewofficeedit Yijiusmile
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.1%
CVE-2025-7625 Jul 14, 17:15 LOW POC Monitor

Path traversal in kkFileViewOfficeEdit allows remote attackers to read arbitrary files via a crafted URL parameter. The vulnerability affects all builds up to commit 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd and has publicly available exploit code, though EPSS exploitation probability is very low at 0.09%. Despite its critical classification, the impact is limited to information disclosure and requires low-privilege access.

Path Traversal Kkfileviewofficeedit Yijiusmile
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.1%
CVE-2025-7627 Jul 14, 18:15 LOW POC Monitor

Unrestricted file upload in kkFileViewOfficeEdit up to commit 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd allows remote attackers with low privileges to upload arbitrary files via the /fileUpload endpoint. A publicly available proof-of-concept exploit exists; however, the exploitability probability (EPSS) is low (0.08%), and no active exploitation has been confirmed by CISA KEV. Attackers can upload malicious files, potentially leading to remote code execution on the server.

Authentication Bypass File Upload Kkfileviewofficeedit Yijiusmile
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.1%
CVE-2025-7561 Jul 14, 02:15 LOW POC Monitor

SQL injection in PHPGurukul Online Fire Reporting System 1.2 allows authenticated remote attackers to manipulate database queries via the teamid parameter in /admin/team-ontheway-requests.php. Exploit code is publicly available, but exploitation requires low‑privileged administrative access. EPSS remains very low (0.05%), and the vulnerability is not listed in CISA KEV.

PHP SQLi Online Fire Reporting System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-7559 Jul 14, 02:15 LOW POC Monitor

SQL injection in Online Fire Reporting System 1.2’s admin report page allows authenticated remote attackers to execute arbitrary SQL commands via the fromdate/todate parameters. Public exploit code is available, though EPSS indicates a low exploitation probability of 0.05% and no active exploitation has been confirmed by CISA KEV.

PHP SQLi Online Fire Reporting System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-7568 Jul 14, 04:15 LOW POC Monitor

SQL injection in FoxCMS admin Video.php allows authenticated attackers to execute arbitrary SQL via the ids parameter. Affects FoxCMS versions up to 1.2.5. Public exploit code exists, but no active exploitation has been reported to CISA KEV; EPSS probability is low (0.04%).

PHP SQLi Foxcms Qianfox
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-7600 Jul 14, 12:15 LOW POC Monitor

SQL injection in PHPGurukul Online Library Management System 3.0 allows authenticated attackers with low privileges to manipulate the stdid parameter in the /admin/student-history.php endpoint, potentially reading or modifying database records. A proof-of-concept exploit is publicly available, but the EPSS exploitation probability is very low (0.04%), indicating limited real-world threat despite a

PHP SQLi Online Library Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-7599 Jul 14, 12:15 LOW POC Monitor

SQL injection in PHPGurukul Dairy Farm Shop Management System 1.3 allows low-privileged remote attackers to manipulate database queries via the

PHP SQLi Dairy Farm Shop Management System Phpgurukul
NVD VulDB GitHub
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-7591 Jul 14, 09:15 LOW POC Monitor

SQL injection in PHPGurukul Dairy Farm Shop Management System 1.3 allows authenticated remote attackers to manipulate database queries via the invid parameter in view-invoice.php. An attacker with low-privilege access can exploit this to exfiltrate or modify data. Exploit code is publicly available, but no active exploitation has been confirmed.

PHP SQLi Dairy Farm Shop Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-7590 Jul 14, 09:15 LOW POC Monitor

Remote SQL injection in PHPGurukul Dairy Farm Shop Management System 1.3 via the categorycode parameter in edit-category.php allows low‑privilege authenticated attackers to execute arbitrary SQL commands. Public exploit code is available, but the EPSS score (0.04%) indicates very low exploitation probability, and no active exploitation has been confirmed.

PHP SQLi Dairy Farm Shop Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-7588 Jul 14, 09:15 LOW POC Monitor

We need to produce a JSON output per the instructions. Let's gather data: CVE ID: CVE-2025-7588 Description: Critical vulnerability in PHPGurukul Dairy Farm Shop Management System 1.3, affects edit-product.php, productname parameter leads to SQL injection. Attack remote. Exploit disclosed publicly. CVSS vector provided: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X We need to calculate CVSS 3.1 ourselves and assess risk. CWE: CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')), but description says SQL injection, which typically goes under CWE-89. But CWE-74 is broader injection. We'll note CWE-74 from input. EPSS: 0.04%, percentile 12% - very low exploitation probability. POC: Publicly available (exploit disclosed to public, may be used). KEV: not mentioned, not in KEV. Patch: No info about patch. No vendor advisory beyond references. References include vuldb entries and GitHub issue (exploit). No fix version. CPE: cpe:2.3:a:phpgurukul:dairy_farm_shop_management_system:1.3:*:*:*:*:*:*:* Tags: PHP, SQLi Other: Reported by cna@vuldb.com, so it's a vuldb entry. EUVD ID number. Affected products from EUVD: Dairy Farm Shop Management System 1.3 only. Now, analysis: product_name: "PHPGurukul Dairy Farm Shop Management System" - that's a specific product, but the request says 1-3 words only, maybe "Dairy Farm Shop Management System" (4 words) or "Dairy Farm System"? The product is PHPGurukul Dairy Farm Shop Management System. I'd pick "Dairy Farm Shop Management System" but that's 4 words. 1-3 words: "Dairy Farm System" is too generic. "PHPGurukul DFMS"? Better: "PHPGurukul Dairy Farm System" (4 words) or "Dairy Farm Shop System". Given the description says "PHPGurukul Dairy Farm Shop Management System 1.3", I'll use "Dairy Farm Shop System" (3 words) but that might lose vendor. The rule: "product_name": "1-3 words ONLY. The specific product or service name affected. Examples: 'Apache Tomcat', 'WordPress', 'Linux Kernel', 'nginx-ui', 'GoAnywhere MFT'. NOT the vulnerability type, NOT the vendor alone, NOT a description. If multiple products, pick the primary one." So for a product named "Dairy Farm Shop Management System", it's a specific product. I'd go with "Dairy Farm Shop MS" or just "Dairy Farm System". But the examples show "GoAnywhere MFT" which is a product with acronym. I think "Dairy Farm System" is too generic. Maybe "DF Shop Management"? No. I'll pick "Dairy Farm Shop System" but that's 3 words. "Dairy Farm Shop" is 3 words. Actually "Dairy Farm Shop Management System" - I need the primary product name. "Dairy Farm Shop Management System" is the full name. The instruction says 1-3 words. I could truncate: "Dairy Farm System" (3 words) - but that misplaces the "shop"? I think the intent is not to give full name but concise. Another approach: Use the product as named in CPE: "dairy_farm_shop_management_system", but human-readable: "Dairy Farm Shop System" is acceptable. I'll go with "Dairy Farm Shop System" as 3 words. However, the requested examples: "WordPress" (one word), "Apache Tomcat" (two words), "Linux Kernel" (two words). So I need a short product name. "Dairy Farm System" is short and captures the essence, but the product is specifically for dairy farm shop. I'll go with "Dairy Farm System" (3 words). Better: "Dairy Farm Shop System" (4 words, too many). So "Dairy Farm System" (3 words). That's likely sufficient. I'll output "Dairy Farm System" but note it's PHPGurukul's. The product_name field is just the primary product name, not vendor. So I'll do "Dairy Farm Shop System" if I can, but 3 word limit: "Dairy Farm System" fits. I'll settle for "Dairy Farm System". summary: Need original synthesis, not copying description. Start with impact verb and product. Impact: SQL injection allows remote attackers to manipulate productname parameter, potentially leading to data manipulation or retrieval. So: "SQL injection in PHPGurukul Dairy Farm Shop Management System 1.3 allows remote attackers to inject SQL commands via the 'productname' parameter in edit-product.php. The vulnerability has a public exploit, but active exploitation is not confirmed; EPSS score is low (0.04%)." I can phrase: "SQL injection in PHPGurukul Dairy Farm System 1.3 allows remote attackers to execute arbitrary SQL via the edit-product.php 'productname' parameter. This can lead to data breach or manipulation, and a public proof-of-concept exists. Despite critical classification, CVSS 4.0 scored it moderate due to low impact metrics." technical_context: Use CPE to identify exact product. PHPGurukul Dairy Farm Shop Management System 1.3 is a PHP-based web application. edit-product.php is a server-side script that likely handles product editing, and the 'productname' argument is vulnerable to SQL injection due to improper input sanitization (CWE-74, or more precisely CWE-89). The attack is initiated remotely over the network, as indicated by CVSS AV:N. risk_assessment: CVSS vector provided is 4.0: AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N. That means network, low attack complexity, no user interaction, but requires low privileges (PR:L). Impact on vulnerable system: all low (VC:L, VI:L, VA:L). Subsequent system impact none. Exploit maturity: E:P (proof-of-concept). This vector results in a CVSS 4.0 score of around 5.1? Let's compute: Base score formula for 4.0 with these metrics: AV:N=0.2, AC:L=0.77, AT:N=0, PR:L=0.11, UI:N=0.13, VC:L=0.23, VI:L=0.23, VA:L=0.23, SC:N=0, SI:N=0, SA:N=0. The formula is complex, but given low impact and low privileges, score would be around 4.6-5.3. The given CVSS vector didn't include a score, but we can infer it's around that. EPSS 0.04% indicates very low likelihood of exploitation in the wild. No KEV, so not actively exploited. POC publicly available. So risk is limited: low privileges needed, but exploitation yields low confidentiality, integrity, and availability impact. The vulnerability is in a niche product, which reduces real-world risk. Overall, it's a low-to-moderate risk despite public exploit. I need to compare and contrast: CVSS 4.0 suggests moderate base score (maybe 5.1), but EPSS low, and low impact metics. So it's not a high risk. I'll state that the vector indicates that authentication (low privilege) is needed, so it's not unauthenticated, limiting widespread impact. Also the product appears to be a small-scale management system, so prevalence is low. affected_products: The input provides exact product and version: PHPGurukul Dairy Farm Shop Management System version 1.3. CPE: cpe:2.3:a:phpgurukul:dairy_farm_shop_management_system:1.3. No vendor advisory link in references, only the vuldb links and GitHub. So I'll list the affected product with version and note that it's the only known affected version. I'll mention that no patches are indicated and that users should check for updates from the vendor. I'll include the reference to the vuldb advisory for details. remediation: No patch mentioned. So no vendor patch. I'll suggest workarounds: Since it's SQL injection in the productname parameter, possible mitigations: Input validation and parameterized queries. But that's for developers. For end users, they could restrict access to the admin panel or disable edit-product.php until a fix is available. I'll mention that no official patch exists, and users should monitor vendor for updates or apply coding fixes themselves. I'll reference the vuldb entry ID 316287 for details. I'll note that the product is a PHP application; a temporary workaround is to restrict access to the edit-product.php script to trusted users only, but that's not a fix. exploit_scenario: An attacker with low-privilege access (e.g., an authenticated user) can send a crafted POST request to edit-product.php with malicious SQL in the 'productname' field. Successful exploitation could allow extraction of database data, such as user credentials or product listing. The attack complexity is low because no special bypass is needed beyond basic SQL injection techniques. exploitation_conditions: According to the CVE description and CVSS vector, the attack requires low privileges (PR:L), meaning an attacker must have some authenticated access to the application. The specific condition is that user must be able to reach the edit-product.php page and interact with the product editing functionality. There is no indication that the vulnerability affects the default configuration; it is likely accessible to any authenticated user with product editing rights. So exploitation requires an authenticated session with permissions to edit products. I'll state: "Exploitation requires authenticated access to the application (low-privilege user account) and the ability to submit data to the edit-product.php endpoint. No special configuration beyond default product editing role is needed." That's specific. attack_chain: Needs 3-7 steps. Using kill chain phases: Access -> Exploit -> Impact. Since requires low privilege, attacker first obtains authenticated session (Access). Then send crafted request to edit-product.php -> inject SQL via productname -> execute arbitrary SQL -> extract/alter data. So chain: "Obtain low-privilege authenticated session (e.g., registered user) → Send crafted HTTP POST request to edit-product.php with malicious SQL in productname parameter → SQL injection executes in backend database → Attacker reads, modifies, or deletes database records." That's 4 steps. So: "Obtain low-privilege authenticated session → Send crafted POST request to /edit-product.php → Inject SQL via productname parameter → Read or modify database contents." Good. confidence_notes: The vulnerability is confirmed by NVD and VulDB; the CVSS 4.0 vector is provided, public exploit exists via GitHub. No vendor advisory found, and no patch version is indicated. EPSS score is low, and no evidence of active exploitation. Missing: vendor-provided fix, exact exploit details beyond GitHub issue, and active exploitation status. I'll state: "Exploit confirmed via public disclosure and GitHub. No vendor patch identified. EPSS low, no active exploitation observed at this time. CVSS 4.0 base vector available; impact metrics are low." prevalence: The product is a dairy farm shop management system, likely a niche PHP application, not widely deployed. So prevalence should be "low". I'll pick "low". prevalence_basis: "niche PHPGurukul project for small dairy farm shops" or similar. I'll say "niche web application with limited enterprise deployment". assessed_cvss_vector: Need to calculate my own CVSS 3.1 vector based on description. The CVSS 4.0 vector provided is: AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N. Mapping to 3.1: AV:N (Network), AC:L (Low), PR:L (Low), UI:N (None), S:U (no scope change since subsequent impact is all N? Actually S is scope; if all subsequent impacts are N, then scope is unchanged. So I'll set S:U), Confidentiality Impact C:L (low), I:L, A:L. So CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L. That's a base score of

PHP SQLi Dairy Farm Shop Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-7585 Jul 14, 08:15 LOW POC Monitor

SQL injection in PHPGurukul Online Fire Reporting System 1.2 via the 'webtitle' parameter of /admin/manage-site.php enables remote attackers with low privileges to compromise the database. Exploit code is publicly available, although EPSS indicates a very low probability of widespread exploitation (0.04%).

PHP SQLi Online Fire Reporting System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-7592 Jul 14, 10:15 LOW POC Monitor

SQL injection in PHPGurukul Dairy Farm Shop Management System 1.3 allows low-privileged remote attackers to manipulate the 'del' parameter in invoices.php, potentially compromising the backend database. Public exploit code is available, but no active exploitation (CISA KEV) has been detected, and EPSS indicates a very low exploitation probability (0.04%).

PHP SQLi Dairy Farm Shop Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-7589 Jul 14, 09:15 LOW POC Monitor

SQL injection in PHPGurukul Dairy Farm Shop Management System 1.3 allows remote authenticated attackers to execute arbitrary SQL commands via the companyname parameter in edit-company.php. A public exploit exists, but no active exploitation has been reported; the EPSS score is low (0.04%), indicating limited exploitation likelihood despite the critical classification in the description.

PHP SQLi Dairy Farm Shop Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-7584 Jul 14, 08:15 LOW POC Monitor

SQL injection in PHPGurukul Online Fire Reporting System 1.2 via the teammember parameter in /admin/add-team.php allows remote attackers to execute arbitrary SQL commands. The vulnerability has a public exploit, but EPSS probability is low (0.04%) and it is not listed in CISA KEV, indicating no active exploitation at this time.

PHP SQLi Online Fire Reporting System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-7583 Jul 14, 08:15 LOW POC Monitor

SQL injection in PHPGurukul Online Fire Reporting System 1.2 allows authenticated attackers with low privileges to extract or manipulate database data via the teamid parameter of /admin/all-requests.php. A proof-of-concept exploit is publicly available, but EPSS estimates low exploitation likelihood (0.04%).

PHP SQLi Online Fire Reporting System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-7582 Jul 14, 07:15 LOW POC Monitor

SQL injection in PHPGurukul Online Fire Reporting System 1.2 allows authenticated remote attackers to manipulate the teamid parameter in /admin/assigned-requests.php, leading to unauthorized database access. Exploit code is publicly available, but no active exploitation has been confirmed by CISA KEV. EPSS probability is very low (0.04%), indicating limited real-world risk despite the public disclosure.

PHP SQLi Online Fire Reporting System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-7581 Jul 14, 07:15 LOW POC Monitor

SQL injection vulnerability in code-projects Voting System 1.0 allows remote authenticated attackers to manipulate the ID parameter in /admin/positions_edit.php, potentially leading to unauthorized data access or modification. A public exploit is available, but low CVSS score (2.1) and EPSS (0.04%) indicate limited real-world risk, and no active exploitation has been reported.

PHP SQLi Voting System Fabian
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
Prev Page 2 of 3 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy