Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/09/29 10:56 a.m.•25 views

CVE-2025-11052

A security flaw has been discovered in kidaze CourseSelectionSystem 1.0/5.php. The impacted element is an unknown function of the file /Profilers/PriProfile/COUNT3s5.php. Performing manipulation of the argument csslc results in sql injection. The attack can be initiated remotely. The exploit has...

7.5CVSS7AI score0.00421EPSS
SaveExploits1References1
CVE
CVE
•added 2025/09/27 7:02 a.m.•35 views

CVE-2025-11052

CVE-2025-11052 affects kidaze CourseSelectionSystem version 1.0/5.php, with the vulnerability located in /Profilers/PriProfile/COUNT3s5.php where manipulating the csslc parameter leads to SQL injection. The issue is exploitable remotely and an exploit has been publicly released. Multiple sources ...

9.8CVSS6.7AI score0.00421EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2025/09/27 7:02 a.m.•9 views

CVE-2025-11052 kidaze CourseSelectionSystem COUNT3s5.php sql injection

A security flaw has been discovered in kidaze CourseSelectionSystem 1.0/5.php. The impacted element is an unknown function of the file /Profilers/PriProfile/COUNT3s5.php. Performing manipulation of the argument csslc results in sql injection. The attack can be initiated remotely. The exploit has...

7.5CVSS6.7AI score0.00421EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/09/27 7:02 a.m.•32 views

CVE-2025-11052 kidaze CourseSelectionSystem COUNT3s5.php sql injection

A security flaw has been discovered in kidaze CourseSelectionSystem 1.0/5.php. The impacted element is an unknown function of the file /Profilers/PriProfile/COUNT3s5.php. Performing manipulation of the argument csslc results in sql injection. The attack can be initiated remotely. The exploit has...

7.5CVSS0.00421EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/09/27 12:00 a.m.•11 views

CourseSelectionSystem SQL注入漏洞

CourseSelectionSystem is a simple online course selection system by kidaze individual developer. A SQL injection vulnerability exists in CourseSelectionSystem version 1.0, which originates from an incorrect manipulation of the parameter csslc in the file /Profilers/PriProfile/COUNT3s5.php, which...

9.8CVSS7.7AI score0.00421EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/27 12:00 a.m.•1 views

CVE-2025-11052: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in kidaze CourseSelectionSystem 1.0/5.php. The impacted element is an unknown function of the file /Profilers/PriProfile/COUNT3s5.php. Performing manipulation of the argument csslc results in sql injection. The attack can be initiated remotely. The exploit has...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
Rows per page
Query Builder