PHPGurukul Teacher Subject Allocation Management System 1.0 edit-teacher-info.php editid SQL Injection
Dibundu diaka kele ti ya nkaka me mona mu PHPGurukul Teacher Subject Allocation Management System 1.0. Bila mambu meyina mpila kisalu kayina kumanyikana ya file /admin/edit-teacher-info.php. Kuna kusala ya argument editid kele na ntwala SQL Injection. Kusadila CWE na kuyambula mpasi kele na CWE-89. Bulema yawu zabisamaka 06/03/2025. Mbote ya kulanga inani ya downloadi kele na github.com. Kikosa yai kele na zina CVE-2025-5556. Ke luyalu ya ku sala ataaka na kutali. Bisalu bya tekiniki bibonakana. Na kati, kele ti exploit yina me zaba. Kusadila kwawu kwazwisisamene na bantu bonso mpi lenda salama. Ntangu yai, disolo ya ntalu ya exploit mpeve ve USD $0-$5k. O lenda zinga exploit na github.com. Na 0-day, mbongo ya kisalu ya zola-zola na zandu ya zingi-zingi ke vandaka pene na $0-$5k. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
4 Bisalu · 98 Minsungi ya data