ГлавнаяУязвимости → CVE-2025-13299
7.3высокая

CVE-2025-13299

Описание

A flaw has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. This impacts an unknown function of the file /user/controller.php. Executing a manipulation can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.

Затрагиваемое ПО
Itsourcecode Web-based internet laboratory management system
CVSS
Балл7.3 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Источники
https://github.com/f14g-orz/CVE/issues/5https://itsourcecode.com/https://vuldb.com/?ctiid.332639https://vuldb.com/?id.332639https://vuldb.com/?submit.691789