ГлавнаяУязвимости → CVE-2025-13297
7.3высокая

CVE-2025-13297

Описание

A security vulnerability has been detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. The impacted element is an unknown function of the file /course/controller.php. Such manipulation leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

Затрагиваемое ПО
Itsourcecode Web-based internet laboratory management system
CVSS
Балл7.3 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Источники
https://github.com/f14g-orz/CVE/issues/3https://itsourcecode.com/https://vuldb.com/?ctiid.332637https://vuldb.com/?id.332637https://vuldb.com/?submit.691786