netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-5wcp-5r32-p6w2
GHSA-q2mh-5gjr-6m57
GHSA-rm8v-7m88-ppxf
GHSA-x94g-xwgg-g5h7
This commit is contained in:
advisory-database[bot]
2025-05-31 06:32:43 +00:00
parent f0d8892ad6
commit 1487adcdf7
4 changed files with 208 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2025/05/GHSA-5wcp-5r32-p6w2/GHSA-5wcp-5r32-p6w2.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5wcp-5r32-p6w2",
"modified": "2025-05-31T06:31:13Z",
"published": "2025-05-31T06:31:13Z",
"aliases": [
"CVE-2025-5016"
],
"details": "The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Excerpt Highlights in all versions up to, and including, 4.24.5 (Free) and 2.27.6 (Premium) due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5016"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/relevanssi/tags/4.24.5/lib/excerpts-highlights.php#L418"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ffb2ade3-d5ce-4459-ab83-e28cd4c84922?source=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-31T04:15:25Z"
}
}
advisories/unreviewed/2025/05/GHSA-q2mh-5gjr-6m57/GHSA-q2mh-5gjr-6m57.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-q2mh-5gjr-6m57",
"modified": "2025-05-31T06:31:14Z",
"published": "2025-05-31T06:31:13Z",
"aliases": [
"CVE-2025-5370"
],
"details": "A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5370"
},
{
"type": "WEB",
"url": "https://github.com/GarminYoung/myCVE/issues/5"
},
{
"type": "WEB",
"url": "https://phpgurukul.com"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.310663"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.310663"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.587365"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-31T06:15:19Z"
}
}
advisories/unreviewed/2025/05/GHSA-rm8v-7m88-ppxf/GHSA-rm8v-7m88-ppxf.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rm8v-7m88-ppxf",
"modified": "2025-05-31T06:31:13Z",
"published": "2025-05-31T06:31:13Z",
"aliases": [
"CVE-2025-5369"
],
"details": "A vulnerability classified as critical has been found in SourceCodester PHP Display Username After Login 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5369"
},
{
"type": "WEB",
"url": "https://github.com/shanranne/myCVE/issues/2"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.310662"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.310662"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.587234"
},
{
"type": "WEB",
"url": "https://www.sourcecodester.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-31T05:15:19Z"
}
}
advisories/unreviewed/2025/05/GHSA-x94g-xwgg-g5h7/GHSA-x94g-xwgg-g5h7.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x94g-xwgg-g5h7",
"modified": "2025-05-31T06:31:13Z",
"published": "2025-05-31T06:31:13Z",
"aliases": [
"CVE-2025-5368"
],
"details": "A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. This issue affects some unknown processing of the file /expense-yearwise-reports-detailed.php. The manipulation of the argument todate leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5368"
},
{
"type": "WEB",
"url": "https://github.com/f1rstb100d/myCVE/issues/25"
},
{
"type": "WEB",
"url": "https://phpgurukul.com"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.310661"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.310661"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.586911"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-31T04:15:28Z"
}
}