Skip to main content
CVE-2025-13248 Nov 16, 11:15 MEDIUM POC This Month

A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Patients Waiting Area Queue Management System Pamzey
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.1%
CVE-2025-13247 Nov 16, 11:15 MEDIUM POC This Month

A security flaw has been discovered in PHPGurukul Tourism Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Tourism Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.1%
CVE-2025-13242 Nov 16, 08:15 MEDIUM POC This Month

A vulnerability has been found in code-projects Student Information System 2.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Student Information System Fabian
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.1%
CVE-2025-13241 Nov 16, 07:15 MEDIUM POC This Month

A flaw has been found in code-projects Student Information System 2.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Student Information System Fabian
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.1%
CVE-2025-13240 Nov 16, 07:15 MEDIUM POC This Month

A vulnerability was detected in code-projects Student Information System 2.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Student Information System Fabian
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.1%
CVE-2025-13237 Nov 16, 05:16 MEDIUM POC This Month

A security flaw has been discovered in itsourcecode Inventory Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Inventory Management System Janobe
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.1%
CVE-2025-13235 Nov 16, 04:15 MEDIUM POC This Month

A vulnerability was determined in itsourcecode Inventory Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Inventory Management System Janobe
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.1%
CVE-2025-13233 Nov 16, 03:15 MEDIUM POC This Month

A vulnerability has been found in itsourcecode Inventory Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Inventory Management System Janobe
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.1%
CVE-2025-13239 Nov 16, 06:15 LOW POC Monitor

A security vulnerability has been detected in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution 5. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Isshue Bdtask
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.1%
CVE-2025-13250 Nov 16, 12:15 LOW POC Monitor

A vulnerability was detected in WeiYe-Jing datax-web up to 2.1.2. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Datax Web Datax Web Project
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.1%
CVE-2025-13244 Nov 16, 09:15 LOW POC Monitor

A vulnerability was determined in code-projects Student Information System 2.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Student Information System Fabian
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.1%
CVE-2025-13238 Nov 16, 06:15 LOW POC Monitor

A weakness has been identified in Bdtask Flight Booking Software 4. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass File Upload Flight Booking Software Bdtask
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.1%
CVE-2025-13251 Nov 16, 13:15 LOW POC Monitor

A flaw has been found in WeiYe-Jing datax-web up to 2.1.2. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Datax Web Datax Web Project
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.1%
CVE-2025-13243 Nov 16, 08:15 LOW POC Monitor

A vulnerability was found in code-projects Student Information System 2.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Student Information System Fabian
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-13236 Nov 16, 04:15 LOW POC Monitor

A vulnerability was identified in itsourcecode Inventory Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Inventory Management System Janobe
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-13234 Nov 16, 03:15 LOW POC Monitor

A vulnerability was found in itsourcecode Inventory Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Inventory Management System Janobe
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-13245 Nov 16, 09:15 LOW POC Monitor

A vulnerability was identified in code-projects Student Information System 2.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Student Information System Fabian
NVD GitHub VulDB
CVSS 4.0
2.0
EPSS
0.0%
CVE-2025-13252 Nov 16, 23:15 MEDIUM This Month

A vulnerability was found in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.1%
CVE-2025-13246 Nov 16, 10:15 LOW Monitor

A vulnerability was identified in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Java Path Traversal
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.1%
CVE-2025-13249 Nov 16, 12:15 LOW Monitor

A security vulnerability has been detected in Jiusi OA up to 20251102. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass File Upload
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.1%
CVE-2025-13232 Nov 16, 01:15 LOW Monitor

A flaw has been found in projectsend up to r1720. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS
NVD GitHub VulDB
CVSS 4.0
2.0
EPSS
0.1%
CVE-2025-12482 Nov 16, 05:15 HIGH This Month

The Booking for Appointments and Events Calendar - Amelia plugin for WordPress is vulnerable to SQL Injection via the ‘search’ parameter in all versions up to, and including, 1.2.35 due to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress SQLi
NVD
CVSS 3.1
7.5
EPSS
0.1%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy