BUPT2025201/CVE

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-15354 ↗	Dec 30, 2025Tuesday, 30 December 2025, 20:16	7.3 HIGH	7.5 HIGH
A flaw has been found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/add_admin.php. Executing manipulation of the argument Username can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
CVE-2025-15353 ↗	Dec 30, 2025Tuesday, 30 December 2025, 20:15	7.3 HIGH	7.5 HIGH
A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is the function edit_admin_query of the file /admin/edit_admin_query.php. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.
CVE-2025-15188 ↗	Dec 29, 2025Monday, 29 December 2025, 13:15	2.4 LOW	3.3 LOW
A vulnerability was determined in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/search-invoices.php. Executing a manipulation of the argument searchdata can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.