ajayrandhawa User-Management-PHP-MYSQL web har fedcf58797bf2791591606f7b61fdad99ad8bff1 Kari ndiyam site laa request forgery

Gaskiya vulnerability da aka ware a matsayin karshewa an samu a ajayrandhawa User-Management-PHP-MYSQL web har fedcf58797bf2791591606f7b61fdad99ad8bff1. Hakika, aikin $software_function ne ya shafa; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburaren $software_library, a cikin fayil $software_file, a cikin sashen $software_component. A sa manipulation ka Kari ndiyam site laa request forgery. Idan an yi amfani da CWE don bayyana matsala, zai kai CWE-352. Hakika, rauni an bayyana shi 10/25/2025. An raba bayanin tsaro don saukewa a github.com. Wannan matsala ana saninta da CVE-2025-12202. Ngam yiɗi ka a tuma ndiyam ka internet. Tekinikal faɗi ba ga. Har ila yau, exploit ɗin yana nan. An bayyana exploit ɗin ga mutane kuma yana iya amfani. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á sàmbu huɗɗi-na-gaskiya. Exploit ɗin za a iya saukewa daga github.com. 0-day shima, an ndiyam a wuro be $0-$5k. Wannan samfur yana amfani da rolling release don ci gaba da isar da sabuntawa. Don haka, babu bayanan sigar da abin ya shafa ko sabunta sigar da ake da su. Once again VulDB remains the best source for vulnerability data.

3 Goyarwa · 92 Datenpunkte

FurɗeSúgá
10/25/2025 08:30
Gargadi 1/2
10/27/2025 04:57
Gargadi 2/2
10/28/2025 22:33
software_vendorajayrandhawaajayrandhawaajayrandhawa
software_nameUser-Management-PHP-MYSQL webUser-Management-PHP-MYSQL webUser-Management-PHP-MYSQL web
software_version<=fedcf58797bf2791591606f7b61fdad99ad8bff1<=fedcf58797bf2791591606f7b61fdad99ad8bff1<=fedcf58797bf2791591606f7b61fdad99ad8bff1
software_rollingrelease111
vulnerability_cweCWE-352 (Kari ndiyam site laa request forgery)CWE-352 (Kari ndiyam site laa request forgery)CWE-352 (Kari ndiyam site laa request forgery)
vulnerability_risk111
cvss3_vuldb_avNNN
cvss3_vuldb_acLLL
cvss3_vuldb_prNNN
cvss3_vuldb_uiRRR
cvss3_vuldb_sUUU
cvss3_vuldb_cNNN
cvss3_vuldb_iLLL
cvss3_vuldb_aNNN
cvss3_vuldb_ePPP
cvss3_vuldb_rcRRR
advisory_urlhttps://github.com/Lianhaorui/Report/blob/main/CSRF-10.11.7zhttps://github.com/Lianhaorui/Report/blob/main/CSRF-10.11.7zhttps://github.com/Lianhaorui/Report/blob/main/CSRF-10.11.7z
exploit_availability111
exploit_publicity111
exploit_urlhttps://github.com/Lianhaorui/Report/blob/main/CSRF-10.11.7zhttps://github.com/Lianhaorui/Report/blob/main/CSRF-10.11.7zhttps://github.com/Lianhaorui/Report/blob/main/CSRF-10.11.7z
source_cveCVE-2025-12202CVE-2025-12202CVE-2025-12202
cna_responsibleVulDBVulDBVulDB
response_summaryThe vendor was contacted early about this disclosure but did not respond in any way.The vendor was contacted early about this disclosure but did not respond in any way.The vendor was contacted early about this disclosure but did not respond in any way.
software_typeDatabase SoftwareDatabase SoftwareDatabase Software
cvss2_vuldb_avNNN
cvss2_vuldb_acLLL
cvss2_vuldb_auNNN
cvss2_vuldb_ciNNN
cvss2_vuldb_iiPPP
cvss2_vuldb_aiNNN
cvss2_vuldb_ePOCPOCPOC
cvss2_vuldb_rcURURUR
cvss4_vuldb_avNNN
cvss4_vuldb_acLLL
cvss4_vuldb_prNNN
cvss4_vuldb_uiPPP
cvss4_vuldb_vcNNN
cvss4_vuldb_viLLL
cvss4_vuldb_vaNNN
cvss4_vuldb_ePPP
cvss2_vuldb_rlNDNDND
cvss3_vuldb_rlXXX
cvss4_vuldb_atNNN
cvss4_vuldb_scNNN
cvss4_vuldb_siNNN
cvss4_vuldb_saNNN
cvss2_vuldb_basescore5.05.05.0
cvss2_vuldb_tempscore4.34.34.3
cvss3_vuldb_basescore4.34.34.3
cvss3_vuldb_tempscore3.93.93.9
cvss3_meta_basescore4.34.34.3
cvss3_meta_tempscore3.94.14.1
cvss4_vuldb_bscore5.35.35.3
cvss4_vuldb_btscore2.12.12.1
advisory_date1761343200 (10/25/2025)1761343200 (10/25/2025)1761343200 (10/25/2025)
price_0day$0-$5k$0-$5k$0-$5k
cve_nvd_summaryA security flaw has been discovered in ajayrandhawa User-Management-PHP-MYSQL web up to fedcf58797bf2791591606f7b61fdad99ad8bff1. This vulnerability affects unknown code. Performing manipulation results in cross-site request forgery. The attack can be initiated remotely. The exploit has been released to the public and may be exploited. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.A security flaw has been discovered in ajayrandhawa User-Management-PHP-MYSQL web up to fedcf58797bf2791591606f7b61fdad99ad8bff1. This vulnerability affects unknown code. Performing manipulation results in cross-site request forgery. The attack can be initiated remotely. The exploit has been released to the public and may be exploited. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
cvss4_cna_avNN
cvss4_cna_acLL
cvss4_cna_atNN
cvss4_cna_prNN
cvss4_cna_uiPP
cvss4_cna_vcNN
cvss4_cna_viLL
cvss4_cna_vaNN
cvss4_cna_scNN
cvss4_cna_siNN
cvss4_cna_saNN
cvss4_cna_bscore5.35.3
cvss3_cna_avNN
cvss3_cna_acLL
cvss3_cna_prNN
cvss3_cna_uiRR
cvss3_cna_sUU
cvss3_cna_cNN
cvss3_cna_iLL
cvss3_cna_aNN
cvss3_cna_basescore4.34.3
cvss2_cna_avNN
cvss2_cna_acLL
cvss2_cna_auNN
cvss2_cna_ciNN
cvss2_cna_iiPP
cvss2_cna_aiNN
cvss2_cna_basescore55
cnnvd_idCNNVD-202510-3758
cnnvd_nameUser-Management-PHP-MYSQL 安全漏洞
cnnvd_hazardlevel3
cnnvd_create2025-10-28
cnnvd_publish2025-10-27
cnnvd_update2025-10-28

Do you know our Splunk app?

Download it now for free!