CVE-2025-10405: falha de média gravidade em itsourcecode Baptism Information Management…
itsourcecode Baptism Information Management System listbaptism.php sql injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.4%
A vulnerability was determined in itsourcecode Baptism Information Management System 1.0. Affected is an unknown function of the file /listbaptism.php. This manipulation of the argument bapt_id causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
itsourcecode · Baptism Information Management SystemCVEs relacionadas — itsourcecode Baptism Information Management…
No mesmo produto, das mais perigosas para as menos.
CVE-2025-10404MEDIUMitsourcecode Baptism Information Management System rptbaptismal.php sql injectionEPSS 0.4%CVE-2026-13551MEDIUMitsourcecode Baptism Information Management System editBaptism.php sql injectionEPSS 0.4%CVE-2026-13550MEDIUMitsourcecode Baptism Information Management System delbaptism.php sql injectionEPSS 0.4%CVE-2026-108927MEDIUMitsourcecode Baptism Information Management System pbaptism.php sql injectionEPSS 0.3%CVE-2026-108926MEDIUMitsourcecode Baptism Information Management System ebaptism.php sql injectionEPSS 0.2%