SQL injection in FantasticLBP Hotels_Server allows remote unauthenticated attackers to manipulate the hotelId parameter in the Room.php endpoint, potentially leading to unauthorized database access or manipulation. Public exploit code is available, but EPSS indicates very low exploitation likelihood and it is not listed in CISA KEV.
Unauthenticated remote access to ZKTeco BioTime's /base/safe_setting/ endpoint exposes stored credential material via manipulable backup_encryption_password_decrypt and export_encryption_password_decrypt parameters, affecting versions 9.0.3, 9.0.4, and 9.5.2. The CVSS 4.0 vector (PR:N/UI:N) and an 'Authentication Bypass' tag confirm no credentials or user interaction are required, enabling any network-reachable attacker to retrieve encryption passwords from the application. A public proof-of-concept exploit is available on GitHub, directly lowering the skill barrier for exploitation, though the vulnerability is not yet listed in CISA KEV.
We need to output a JSON with fields as instructed. We must synthesize data from multiple intelligence sources about CVE-2025-15140. First, parse the given info: CVE ID: CVE-2025-15140 Description: A vulnerability was found in saiftheboss7 onlinemcqexam up to 0e56806132971e49721db3ef01868098c7b42ada. It affects unknown code of file /admin/quesadd.php. Manipulation of argument ans1/ans2 results in sql injection. Attack can be carried out remotely. Exploit has been made public. Product adopts rolling release. Vendor did not respond. CVSS Score: 5.5 (CVSS 4.0) CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CWE: CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), generic) Just CWE-74, not CWE-89 specifically, but it's sql injection so fits. EPSS: 0.04% (percentile 14%) Tags: SQLi, PHP References: - https://github.com/Anti1i/cve/issues/4 - https://vuldb.com/?ctiid.338518 - https://vuldb.com/?id.338518 - https://vuldb.com/?submit.715219 - https://vuldb.com/?submit.715463 No KEV, no patch info explicitly. Product: saiftheboss7 onlinemcqexam, a PHP web application for online MCQ exams. The vulnerability is SQL injection via ans1/ans2 parameters in /admin/quesadd.php. The description says "Attack is possible to be carried out remotely." and "Exploit has been made public". So summary: An SQL injection vulnerability in saiftheboss7 onlinemcqexam's admin question addition endpoint allows remote attackers to manipulate ans1/ans2 parameters, potentially extracting or modifying database data. The exploit is public. The product's rolling release means any deployment after commit 0e56806132971e49721db3ef01868098c7b42ada is vulnerable, no fixed version since vendor unresponsive. Technical context: The vulnerability is an SQL injection (CWE-74 injection), in a PHP application using a MySQL-like database. The /admin/quesadd.php endpoint takes ans1 and ans2 parameters without prop
SQL injection in phpok3w's show.php allows remote attackers to manipulate database queries by injecting through the ID parameter. The vulnerability affects rolling release versions up to commit 901d96a06809fb28b17f3a4362c59e70411c933c, with a publicly available exploit but no known active exploitation. EPSS prediction is low (0.04%), suggesting limited real-world threat despite the network attack vector.