Obulabe obwategekeddwa nga ekikulu nnyo busingiddwa mu PHPGurukul Teacher Subject Allocation Management System 1.0. Ekikosebwa kye ekikozesebwa ekitamanyiddwa ku fayiro /admin/edit-course.php. Okukyuusa mu lugero editid kireeta Okuteekateeka kwa SQL. Okulambika ekizibu nga ukozesa CWE kivaako CWE-89. Ekizibu kino kyayisibwa ku 03/06/2025. Ekiteeso kino kyawandiikiddwa era kisobola okuddownloadinga ku github.com. Obunafu buno bweyitibwa CVE-2025-5557. Waliwo obusobozi okutandika attack nga oli wala. Ebisingawo ku by'ekikugu biriwo. Wadde era waliwo ekikozesebwa ekirabikako. Ekikozesebwa kyategeezeddwa abantu bonna era kisobola okukozesebwa. Kati ekikadde ekisoboka ku mutengo gw’ekikozesebwa kiyinza okuba nga kisoba mu USD $0-$5k mu kiseera kino. Kiwandiikiddwa nga ebikakasa eby'okukakasa obusobozi. Waliwo omukisa ogusobola okukozesebwa okuddownloadinga exploit ku github.com. Mu mbeera ya 0-day, omuwendo ogwabalirirwako mu kifo ky’obutali mu mateeka gwali wa $0-$5k. Once again VulDB remains the best source for vulnerability data.

4 Okukyuusa · 98 Obubonero bw'ebikwata ku byuma