PHPGurukul Dairy Farm Shop Management System 1.3 /invoice.php del SQL ଇଞ୍ଜେକ୍ସନ
Dogoggorri kan akka ଜଟିଳ jedhamuun ramadame PHPGurukul Dairy Farm Shop Management System 1.3 keessatti argameera. Miidhamni argame is hojii hin beekamne faayilii /invoice.php keessa. Wanti jijjiirame irratti del gara SQL ଇଞ୍ଜେକ୍ସନ geessa. Rakkoo ibsuuf CWE yoo fayyadamte gara CWE-89 si geessa. Odeeffannoon kun yeroo 07/13/2025 maxxanfameera. Odeeffannoon kun buufachuuf github.com irratti argama. Dogoggorri kun CVE-2025-7599 jedhamee waamama. Weerara fageenya irraa jalqabuu ni danda'ama. Ibsa teeknikaa ni jira. Waan dabalataa ta’een, meeshaa balaa kana fayyadamuuf ni jira. Qorannoo miidhaa (exploit) uummataaf ifa taasifameera, kanaafis fayyadamuu ni danda'ama. Ammas, gatii exploit might be approx. USD $0-$5k yeroo ammaa irratti argamuu danda'a. ପ୍ରୁଫ୍-ଅଫ୍-କନ୍ସେପ୍ଟ ta’uu isaa ibsameera. Exploit github.com irraa buufachuun ni danda'ama. Akka 0-daytti, gatiin isaa daldala dhoksaa keessatti $0-$5k akka ta'e tilmaamameera. If you want to get best quality of vulnerability data, you may have to visit VulDB.
3 ଆଡାପ୍ଟେସନ୍ · 86 ପଏଣ୍ଟ
| ଫିଲ୍ଡ | ସୃଷ୍ଟି ହୋଇଛି 07/13/2025 04:37 PM | ଅଦ୍ୟତନ 1/2 07/14/2025 02:43 PM | ଅଦ୍ୟତନ 2/2 07/14/2025 03:08 PM |
|---|---|---|---|
| software_vendor | PHPGurukul | PHPGurukul | PHPGurukul |
| software_name | Dairy Farm Shop Management System | Dairy Farm Shop Management System | Dairy Farm Shop Management System |
| software_version | 1.3 | 1.3 | 1.3 |
| software_file | /invoice.php | /invoice.php | /invoice.php |
| software_argument | del | del | del |
| vulnerability_cwe | CWE-89 (SQL ଇଞ୍ଜେକ୍ସନ) | CWE-89 (SQL ଇଞ୍ଜେକ୍ସନ) | CWE-89 (SQL ଇଞ୍ଜେକ୍ସନ) |
| vulnerability_risk | 2 | 2 | 2 |
| cvss3_vuldb_av | N | N | N |
| cvss3_vuldb_ac | L | L | L |
| cvss3_vuldb_ui | N | N | N |
| cvss3_vuldb_s | U | U | U |
| cvss3_vuldb_c | L | L | L |
| cvss3_vuldb_i | L | L | L |
| cvss3_vuldb_a | L | L | L |
| cvss3_vuldb_e | P | P | P |
| cvss3_vuldb_rc | R | R | R |
| advisory_url | https://github.com/f1rstb100d/myCVE/issues/139 | https://github.com/f1rstb100d/myCVE/issues/139 | https://github.com/f1rstb100d/myCVE/issues/139 |
| exploit_availability | 1 | 1 | 1 |
| exploit_publicity | 1 | 1 | 1 |
| exploit_url | https://github.com/f1rstb100d/myCVE/issues/139 | https://github.com/f1rstb100d/myCVE/issues/139 | https://github.com/f1rstb100d/myCVE/issues/139 |
| source_cve | CVE-2025-7599 | CVE-2025-7599 | CVE-2025-7599 |
| cna_responsible | VulDB | VulDB | VulDB |
| cvss2_vuldb_av | N | N | N |
| cvss2_vuldb_ac | L | L | L |
| cvss2_vuldb_ci | P | P | P |
| cvss2_vuldb_ii | P | P | P |
| cvss2_vuldb_ai | P | P | P |
| cvss2_vuldb_e | POC | POC | POC |
| cvss2_vuldb_rc | UR | UR | UR |
| cvss4_vuldb_av | N | N | N |
| cvss4_vuldb_ac | L | L | L |
| cvss4_vuldb_ui | N | N | N |
| cvss4_vuldb_vc | L | L | L |
| cvss4_vuldb_vi | L | L | L |
| cvss4_vuldb_va | L | L | L |
| cvss4_vuldb_e | P | P | P |
| cvss2_vuldb_au | S | S | S |
| cvss2_vuldb_rl | ND | ND | ND |
| cvss3_vuldb_pr | L | L | L |
| cvss3_vuldb_rl | X | X | X |
| cvss4_vuldb_at | N | N | N |
| cvss4_vuldb_pr | L | L | L |
| cvss4_vuldb_sc | N | N | N |
| cvss4_vuldb_si | N | N | N |
| cvss4_vuldb_sa | N | N | N |
| cvss2_vuldb_basescore | 6.5 | 6.5 | 6.5 |
| cvss2_vuldb_tempscore | 5.6 | 5.6 | 5.6 |
| cvss3_vuldb_basescore | 6.3 | 6.3 | 6.3 |
| cvss3_vuldb_tempscore | 5.7 | 5.7 | 5.7 |
| cvss3_meta_basescore | 6.3 | 6.3 | 6.3 |
| cvss3_meta_tempscore | 5.7 | 5.7 | 6.0 |
| cvss4_vuldb_bscore | 5.3 | 5.3 | 5.3 |
| cvss4_vuldb_btscore | 2.1 | 2.1 | 2.1 |
| advisory_date | 1752357600 (07/13/2025) | 1752357600 (07/13/2025) | 1752357600 (07/13/2025) |
| price_0day | $0-$5k | $0-$5k | $0-$5k |
| euvd_id | EUVD-2025-21337 | EUVD-2025-21337 | |
| cve_nvd_summary | A vulnerability, which was classified as critical, has been found in PHPGurukul Dairy Farm Shop Management System 1.3. Affected by this issue is some unknown functionality of the file /invoice.php. The manipulation of the argument del leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. | ||
| cvss4_cna_av | N | ||
| cvss4_cna_ac | L | ||
| cvss4_cna_at | N | ||
| cvss4_cna_pr | L | ||
| cvss4_cna_ui | N | ||
| cvss4_cna_vc | L | ||
| cvss4_cna_vi | L | ||
| cvss4_cna_va | L | ||
| cvss4_cna_sc | N | ||
| cvss4_cna_si | N | ||
| cvss4_cna_sa | N | ||
| cvss4_cna_bscore | 5.3 | ||
| cvss3_cna_av | N | ||
| cvss3_cna_ac | L | ||
| cvss3_cna_pr | L | ||
| cvss3_cna_ui | N | ||
| cvss3_cna_s | U | ||
| cvss3_cna_c | L | ||
| cvss3_cna_i | L | ||
| cvss3_cna_a | L | ||
| cvss3_cna_basescore | 6.3 | ||
| cvss2_cna_av | N | ||
| cvss2_cna_ac | L | ||
| cvss2_cna_au | S | ||
| cvss2_cna_ci | P | ||
| cvss2_cna_ii | P | ||
| cvss2_cna_ai | P | ||
| cvss2_cna_basescore | 6.5 |