CVE-2025-1189: fallo de gravedad media en 1000 Projects Attendance Tracking Management…
1000 Projects Attendance Tracking Management System chart1.php sql injection
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.3epss 0.5%
A vulnerability, which was classified as critical, was found in 1000 Projects Attendance Tracking Management System 1.0. This affects an unknown part of the file /admin/chart1.php. The manipulation of the argument course_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Productos afectados
1000 Projects · Attendance Tracking Management SystemCVEs relacionadas — 1000 Projects Attendance Tracking Management…
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-12497MEDIUM1000 Projects Attendance Tracking Management System check_admin_login.php sql injectionEPSS 0.9%CVE-2024-13005MEDIUM1000 Projects Attendance Tracking Management System attendance_action.php sql injectionEPSS 0.7%CVE-2024-12940MEDIUM1000 Projects Attendance Tracking Management System student_action.php sql injectionEPSS 0.7%CVE-2024-12787MEDIUM1000 Projects Attendance Tracking Management System check_student_login.php sql injectionEPSS 0.7%CVE-2024-12946MEDIUM1000 Projects Attendance Tracking Management System admin_action.php sql injectionEPSS 0.6%CVE-2024-12899MEDIUM1000 Projects Attendance Tracking Management System course_action.php sql injectionEPSS 0.6%