codesiddhant Jasmin Ransomware 1.0.1 /checklogin.php username/password SQL Injection

Wuro vulnerability wey an yi classify sey kura an gano shi a cikin codesiddhant Jasmin Ransomware 1.0.1. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, /checklogin.php na cikin fayil, $software_component na cikin sashi. Ngam manipulation of the argument username/password shi SQL Injection. CWE shidin ka a yi bayani matsala sai ya kai CWE-89. Gaskiya, laifi an fitar da shi 06/15/2025. Advisory ɗin ana rabawa don saukewa a github.com. Wannan rauni ana sayar da shi da suna CVE-2025-6095. Ngam yiɗi ka a tuma ndiyam ka internet. Tekinikal bayani ga. Kuma, exploit ɗin yana akwai. Wuro exploit ɗin an bayyana shi ga jama'a kuma za a iya amfani da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á wúro huɗɗi-na-gaskiya. Wona yiwuwa a zazzage exploit a github.com. Kama 0-day, an ndiyam a wuro be $0-$5k. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Waktin goyi

Màdùmga

VulDB Mod Team99

Furɗe

cvss3_meta_tempscore3
cvss3_meta_basescore2
cvss3_nvd_basescore1
cvss3_nvd_a1
cvss3_nvd_i1

Commit Conf

99%40
90%32
50%13
80%8
70%6

Approve Conf

99%40
90%32
80%27

99 Kari

IDSandaMàdùmgaFurɗeGargajiyaGargaGargajiyaJawanC
2261977711/14/2025
 VulDB…
cvss3_meta_tempscore7.9see CVSS documentation11/14/2025shingilam
80
2261977611/14/2025
 VulDB…
cvss3_meta_basescore8.1see CVSS documentation11/14/2025shingilam
80
2261977511/14/2025
 VulDB…
cvss3_nvd_basescore9.8nist.gov11/14/2025shingilam
99
2261977411/14/2025
 VulDB…
cvss3_nvd_aHnist.gov11/14/2025shingilam
99
2261977311/14/2025
 VulDB…
cvss3_nvd_iHnist.gov11/14/2025shingilam
99
2261977211/14/2025
 VulDB…
cvss3_nvd_cHnist.gov11/14/2025shingilam
99
2261977111/14/2025
 VulDB…
cvss3_nvd_sUnist.gov11/14/2025shingilam
99
2261977011/14/2025
 VulDB…
cvss3_nvd_uiNnist.gov11/14/2025shingilam
99
2261976911/14/2025
 VulDB…
cvss3_nvd_prNnist.gov11/14/2025shingilam
99
2261976811/14/2025
 VulDB…
cvss3_nvd_acLnist.gov11/14/2025shingilam
99
2261976711/14/2025
 VulDB…
cvss3_nvd_avNnist.gov11/14/2025shingilam
99
2089869506/16/2025
 VulDB…
cve_nvd_summaryesSe encontró una vulnerabilidad clasificada como crítica en codesiddhant Jasmin Ransomware 1.0.1. La función afectada es desconocida en el archivo /checklogin.php. La manipulación del argumento nombre de usuario/contraseña provoca una inyección SQL. Es posible ejecutar el ataque de forma remota. Se ha hecho público el exploit y puede que sea utilizado. Se contactó al proveedor con antelación para informarle sobre esta divulgación, pero no respondió.cve.org06/16/2025shingilam
99
2089755906/16/2025
 VulDB…
euvd_idEUVD-2025-1835206/16/2025shingilam
99
2089696206/16/2025
 VulDB…
cvss3_meta_tempscore6.9see CVSS documentation06/16/2025shingilam
80
2089696106/16/2025
 VulDB…
cvss2_cna_basescore7.5see CVSS documentation06/16/2025shingilam
99
2089696006/16/2025
 VulDB…
cvss2_cna_aiPsee CVSS documentation06/16/2025shingilam
99
2089695906/16/2025
 VulDB…
cvss2_cna_iiPsee CVSS documentation06/16/2025shingilam
99
2089695806/16/2025
 VulDB…
cvss2_cna_ciPsee CVSS documentation06/16/2025shingilam
99
2089695706/16/2025
 VulDB…
cvss2_cna_auNsee CVSS documentation06/16/2025shingilam
99
2089695606/16/2025
 VulDB…
cvss2_cna_acLsee CVSS documentation06/16/2025shingilam
99

79 kala giteji ba a nunu fi.

Want to stay up to date on a daily basis?

Enable the mail alert feature now!