CVE-2025-10404

CVE-2025-10404 affects the open-source-looking product itsourcecode Baptism Information Management System 1.0 . The vulnerability is in the file /rptbaptismal.php where manipulating the ID parameter leads to a SQL injection . Exploitation is described as remote with a publicly available exploit (...

CVE-2025-10405

Mode C: Affected software is itsourcecode Baptism Information Management System 1.0. The vulnerability resides in file /listbaptism.php, specifically the bapt_id parameter, enabling SQL injection. Exploitation can be remote and exploit public disclosures exist. Multiple sources (Red Hat, NVD, CVE...