A stored cross-site scripting vulnerability exists in the web management interface of the R.V.R. Elettronica TLK302T telemetry controller (firmware 1.5.1799).
Command injection in D-Link DIR-823X firmware allows remote authenticated attackers to execute arbitrary OS commands via the ppp_username parameter in the set_wan_settings endpoint. A proof-of-concept exploit is publicly available, but no active exploitation is confirmed. The vulnerability impacts firmware versions up to 202504
Path traversal in the file upload handler of Yottamaster DM2, DM3, and DM200 NAS firmware (up to 1.2.23/1.9.12) allows remote authenticated attackers with low privileges to write arbitrary files to unintended directories. Exploit code is publicly available, though EPSS (0.24%) indicates low probability of widespread exploitation, and no active exploitation has been reported.
Remote command injection in D-Link DCS-930L firmware version 1.15.04 allows authenticated attackers to execute arbitrary system commands via the AdminID parameter of the /setSystemAdmin endpoint. Exploit code is publicly available, but the device is end-of-life and unsupported, so no official patch is expected. The vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog.
SQL injection in itsourcecode Student Information System 1.0 allows authenticated attackers to manipulate database queries via the ID parameter in the /section_edit1.php script. Proof-of-concept exploit code is publicly available, but exploitation requires low-privilege authentication and EPSS indicates very low likelihood of widespread exploitation.
SQL injection in Simple Shopping Cart 1.0 allows authenticated remote attackers to manipulate the item_name parameter in /Admin/additems.php, leading to unauthorized database access. Exploit code is publicly available, but no active exploitation has been confirmed, and a low EPSS score (0.04%) indicates minimal immediate risk.
SQL injection in Simple Shopping Cart 1.0 allows authenticated remote attackers to manipulate database queries via the user_id parameter in /Customers/settings.php. While the CVSS 4.0 base score is only 2.1 (Low), public exploit code is available, enabling authenticated attackers to read or modify database contents. The EPSS score of 0.04% and absence from CISA KEV suggest low real-world exploitation probability, but organizations using this product should assess internal risk based on stored data sensitivity.
SQL injection in Daily Time Recording System 4.5.0 allows remote authenticated (low‑privilege) attackers to inject arbitrary SQL via the detail_Id parameter of /admin/add_payroll.php, enabling limited data disclosure, modification, or service disruption. A public proof‑of‑concept exploit exists, though the EPSS score of 0.04% suggests very low exploitation probability and no active exploitation has been confirmed.
SQL injection in Philipinho Simple-PHP-Blog up to commit 94b5d3e allows low-privileged remote attackers to manipulate SQL queries via the /edit.php endpoint. An exploit is publicly available, but no active exploitation in the wild is reported. EPSS probability is very low (0.04%).
SQL injection in Employee Profile Management System 1.0 enables authenticated remote attackers to inject arbitrary SQL via the per_id parameter in the /print_personnel_report.php endpoint. Public exploit code is available, though active exploitation is not confirmed. The flaw can lead to data leakage or manipulation.
Unrestricted file upload in Campcodes Retro Basketball Shoes Online Store 1.0 allows authenticated administrators to upload malicious files via the product_image parameter of /admin/admin_running.php. This can be exploited for remote code execution, and a public exploit is available. EPSS indicates very low exploitation probability (0.06%), and no active exploitation has been confirmed.
A remote code execution vulnerability in A security vulnerability (CVSS 4.7). Risk factors: public PoC available.
Reflected cross-site scripting in SourceCodester Online Banking System 1.0 allows remote attackers to inject scripts via the First Name or Last Name parameter on the user page. Exploit code is publicly available, though no active exploitation has been confirmed and EPSS indicates very low exploitation probability.
Cross-site scripting (XSS) in GreenCMS 2.3.0603 allows remote attackers with administrative privileges to inject web script via the 'Link' parameter in menu management. The product is end-of-life and no longer supported; an exploit is publicly available but real-world risk is low due to high privilege requirements and limited deployment.
phpIPAM v1.7.3 contains a Cross-Site Request Forgery (CSRF) vulnerability in the database export functionality. The generate-mysql.php function, located in the /app/admin/import-export/ endpoint, allows remote attackers to trigger large database dump downloads via crafted HTTP GET requests if an administrator has an active session.
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.
Remote command injection in Ilevia EVE X1 Server up to version 4.6.5.0.eden allows unauthenticated attackers to execute arbitrary commands on the underlying host. The vulnerability, located in the /ajax/php/leaf_search.php endpoint via the 'line' parameter, has a publicly available proof-of-concept exploit but requires high attack complexity. The vendor reports the issue is already resolved on most devices and recommends disabling external access as a workaround.
A remote code execution vulnerability (CVSS 2.7) that allows a privileged user. Remediation should follow standard vulnerability management procedures.
Path traversal in ORICO CD3510 1.9.12 file upload functionality allows authenticated remote attackers with low privileges to overwrite arbitrary files. The vulnerability, tracked as CVE-2025-14220, has a publicly available exploit but no evidence of active exploitation. The vendor was notified but has not responded, leaving no official patch at this time.
SQL injection in Jshop MiniProgram Mall System 2.9.0 via the cat_id parameter of /index.php/api.html allows low-privileged remote attackers to perform unauthorized database operations, including data extraction or modification. Public exploit code is available
Cross-site scripting in Yealink SIP-T21P E2 firmware version 52.84.0.15 allows remote attackers with low privileges to inject arbitrary web scripts or HTML via the Local Directory Page. The exploit is publicly available and the product is end-of-life with no vendor support. Despite low CVSS and EPSS scores, the vulnerability presents a persistent risk in environments where this unsupported device remains in use.
We need to create a comprehensive JSON analysis for CVE-2025-14205, synthesizing all provided data. The input includes: description, CVSS score 1.9 with vector, CWE-79 (XSS), EPSS 0.03% (low), CPE for fabian chamber_of_commerce_membership_management_system:1.0, tags XSS, PHP, etc. No KEV mentioned, no explicit patch data. POC is made public per description ("exploit has been made public"). Vulnerability: stored/reflected XSS? Description says "manipulation of the argument Full Name/Address/City/State results in cross site scripting". The component is "Your Info Handler" in /membership_profile.php. So likely stored XSS in profile fields. CVSS 4.0 vector: AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P. So PR:H (high privileges required), UI:P (passive user interaction?), VC:N (no confidentiality impact from vulnerable system), VI:L (low integrity impact to vulnerable system), VA:N. No scope change. Exploit maturity: P (Proof-of-concept). That indicates an exploit exists, consistent with "exploit has been made public." So we'll note that publicly available exploit code exists. No KEV, so not actively exploited. We need to produce fields. Product name: "Chamber of Commerce Membership Management System" is long, but rule: "1-3 words ONLY. The specific product or service name affected." So we could pick "Chamber of Commerce Membership Management System" but that's 6 words. Alternative: "Membership Management System"? Not precise. Possibly "code-projects Chamber CMS" or "Chamber CMS". But rule says: "Examples: 'Apache Tomcat', 'WordPress', 'Linux Kernel', 'nginx-ui', 'GoAnywhere MFT'." So the product is the software name, not the vendor. The vendor is "fabian" per CPE, product name in CPE: "chamber_of_commerce_membership_management_system". So I'd use "Chamber of Commerce Membership Management System". That is 6 words, but the rule says "1-3 words ONLY" – it might be acceptable as a proper name? The rule is strict: 1-3 words. That's challenging. Maybe "Comme