Unauthenticated fastjson deserialization in WukongCRM 9.0 (Java edition) via the /OaExamine/setOaExamine HTTP endpoint allows remote attackers to supply attacker-controlled class references that the Alibaba fastjson library instantiates at runtime, enabling arbitrary Java gadget-chain execution. A public proof-of-concept is available on GitHub, lowering the exploitation bar considerably. While the assigned CVSS scores impact conservatively at I:L/A:L with no confidentiality loss, this is inconsistent with the well-documented RCE potential of fastjson deserialization gadget chains - the actual impact may be understated. No public exploit has been confirmed as actively exploited (not in CISA KEV).
Unauthenticated SQL injection in code-projects Web-Based Inventory and POS System 1.0 allows remote attackers to manipulate the emailid parameter on login.php, potentially leading to data theft, authentication bypass, or database corruption. Public exploit code is available, but EPSS indicates a low probability of exploitation (0.03%). No vendor patch has been identified.
SQL injection in PHPGurukul Beauty Parlour Management System 1.1 allows remote unauthenticated attackers to manipulate database queries via the searchdata parameter in /admin/search-invoices.php. Public exploit code is available, but EPSS score is very low (0.03%) and no active exploitation has been confirmed by CISA KEV. The vulnerability can lead to partial data exposure or modification.
SQL injection in Beauty Parlour Management System 1.1 via admin search-appointment.php allows remote attackers to extract or modify database contents. The vulnerability has a publicly available exploit but is not listed in CISA's Known Exploited Vulnerabilities catalog, and
We need to produce a JSON object with all the fields as specified. Use all the data from the multi-source intelligence. Note the assigned CVSS is CVSS:4.0, not 3.1. There's also a CVSS score 5.5 but it's 4.0 vector. We must synthesize, not just paraphrase. The description: Campcodes Advanced Online Voting Management System 1.0, file /admin/login.php, unknown function, username argument leads to SQL injection, remote, exploit disclosed. We have EPSS 0.03%, low. POC publicly available. No KEV mentioned. CPE: campcodes:advanced_online_voting_system:1.0. CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') but likely SQL injection is CWE-89; they gave CWE-74 which is a parent. Could mention that. The references: GitHub with exploit (vul/issues/5), vuldb links, campcodes.com. CVSS:4.0 vector: AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P. So unauthenticated, network, low complexity, no user interaction, low impact on all three (Confidentiality, Integrity, Availability), but scope is none so only vulnerable system. Exploit maturity is Proof-of-Concept (E:P). So overall base score 5.5, which is medium. The 4.0 score is 5.5 (Base). In our assessed CVSS vectors, we'll need to give both 3.1 and 4.0. We must not just copy; we need to provide our own independent assessment grounded in description. Since the description is a typical SQLi with username parameter, remote, unauthenticated (likely /admin/login.php is login page, so no authentication required to send request), low complexity, but impact? SQL injection can lead to data leakage (confidentiality), maybe data modification (integrity) but might be limited. Possibly could lead to admin access depending on SQL. The CVSS 4.0 they gave says low impact on C/I/A, no scope change. That's plausible for a login page SQLi where you can bypass authentication and maybe extract data. I'd assess similar: CVSS 3.1: maybe AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. That's ba
SQL injection in code-projects E-Commerce Website 1.0 allows remote attackers to inject malicious SQL via the order_id parameter of /pages/edit_order_details.php. Exploit code is publicly available, though real-world exploitation probability is very low (EPSS 0.03%). No authentication is required, and the impact is limited to low confidentiality, integrity, and availability impacts.
SQL injection in PHPGurukul Beauty Parlour Management System 1.1 allows remote attackers to manipulate the 'delid' parameter in /admin/new-appointment.php, enabling arbitrary SQL command execution. Exploit code is publicly available, increasing potential risk, although no active exploitation has been confirmed by CISA KEV. Affected systems may suffer unauthorized data access, modification, or deletion.
SQL injection in PHPGurukul Beauty Parlour Management System 1.1 allows unauthenticated remote attackers to access or manipulate database data via the `delid` parameter in `/admin/manage-services.php`. A public proof-of-concept exploit is available, though EPSS indicates low exploitation likelihood (0.03%).
SQL injection in Simple E-Commerce Bookstore 1.0 allows remote attackers to inject SQL via the register_username parameter during user registration, potentially exposing or altering database contents. Exploit code is publicly available, but EPSS indicates a low 0.03% exploitation probability, and no active exploitation is reported.
SQL injection vulnerability in SourceCodester Wedding Reservation Management System 1.0 allows remote attackers to inject malicious SQL via the 'number' parameter in the insertReservation function of function.php, potentially compromising database confidentiality and integrity. Exploit code is publicly available, and the vulnerability has a CVSS 4.0 base score of 5.5 (Medium) with a low EPSS exploitation probability of 0.03%, indicating limited real-world risk while still enabling data theft or tampering.
SQL injection in the Wedding Reservation Management System 1.0 allows remote attackers to manipulate the 'User' parameter in /global.php to execute arbitrary SQL queries. A public proof-of-concept exploit exists, but no active exploitation has been confirmed in the wild. The low EPSS score (0.03%) suggests limited real-world exploitation likelihood despite the publicly available exploit.
SQL injection in Simple E-Commerce Bookstore 1.0 allows remote attackers to execute arbitrary SQL via the login_username parameter in /index.php. The vulnerability permits unauthorized access to the database, potentially leading to data exposure or authentication bypass. Public exploit code is available, but no active exploitation or vendor patch has been confirmed.
SQL injection in Advanced Library Management System 1.0 via the user_id parameter in view_member.php allows remote unauthenticated attackers to manipulate database queries, potentially reading, modifying, or deleting data. Exploit code is publicly available, but EPSS indicates very low exploitation likelihood and no active attacks have been reported.
Remote SQL injection in SourceCodester Hotel and Lodge Management System 1.0 allows attackers to manipulate database queries via the currsymbol parameter in /edit_curr.php. Exploit code is publicly available, but no active exploitation has been confirmed, and EPSS indicates a low exploitation probability (0.03%).
SQL injection in SourceCodester Hotel and Lodge Management System 1.0 allows unauthenticated remote attackers to manipulate the ID parameter of /edit_room.php, leading to unauthorized database access or modification. A proof-of-concept exploit is publicly available, though active exploitation is not confirmed. The vulnerability affects the default installation without any special configuration changes.
SQL injection in SourceCodester Hotel and Lodge Management System 1.0 allows remote attackers to manipulate database queries via the ID parameter in the /edit_customer.php endpoint. Exploit code is publicly available, though EPSS suggests low exploitation probability (0.03%). The vulnerability can lead to unauthorized data modification or exfiltration with low impact on confidentiality, integrity, and availability.
SQL injection in the login page of Student Transcript Processing System 1.0 allows unauthenticated remote attackers to inject arbitrary SQL commands via the 'uname' parameter. A publicly available proof-of-concept exploit exists, but no evidence of active exploitation or inclusion in CISA KEV has been reported. EPSS predicts a very low exploitation probability (0.03%).
SQL injection in itsourcecode Leave Management System 1.0 allows remote attackers to manipulate database queries via the employid parameter in /reset.php. A public proof-of-concept exploit exists, but the EPSS exploitation probability is very low (0.03%), suggesting limited real‑world exploitation despite ease of attack. No active exploitation (CISA KEV) has been reported, and the vendor has not issued a patch.
SQL injection in SourceCodester Simple E-Commerce Bookstore 1.0 allows remote attackers to manipulate the 'remove' parameter in /cart.php to execute arbitrary SQL commands. A publicly available proof-of-concept exploit exists, but the EPSS exploitation probability is very low (0.03%), indicating minimal real-world exploitation risk despite the remote attack vector. No active exploitation in the wild has been confirmed (CISA KEV not listed).
Remote command injection in D-Link DIR-852 routers allows unauthenticated attackers to execute arbitrary shell commands via the HNAP1 web interface. A public exploit is available, and the product is end-of-life with no vendor patches planned. The EPSS score of 0.34% indicates low probability of widespread exploitation, but exposed devices remain at immediate risk.