Sec WriteUp ~ CVE Alert

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:47:37 +0200 *************** ✏️Title: CVE-2025-5656 | PHPGurukul Complaint Management System 2.0 /admin/edit-category.php description sql injection *************** 📎Link: https://vuldb.com/?id.311146 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Complaint Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:47:38 +0200 *************** ✏️Title: CVE-2025-5657 | PHPGurukul Complaint Management System 2.0 /admin/manage-users.php uid sql injection *************** 📎Link: https://vuldb.com/?id.311147 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Complaint Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:47:40 +0200 *************** ✏️Title: CVE-2025-5658 | PHPGurukul Complaint Management System 2.0 updatecomplaint.php Status sql injection *************** 📎Link: https://vuldb.com/?id.311148 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Complaint Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:47:41 +0200 *************** ✏️Title: CVE-2025-5659 | PHPGurukul Complaint Management System 2.0 /user/profile.php pincode sql injection *************** 📎Link: https://vuldb.com/?id.311149 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Complaint Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:47:43 +0200 *************** ✏️Title: CVE-2025-5660 | PHPGurukul Complaint Management System 2.0 register-complaint.php noc sql injection *************** 📎Link: https://vuldb.com/?id.311150 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Complaint Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:50:06 +0200 *************** ✏️Title: CVE-2025-5661 | code-projects Traffic Offense Reporting System 1.0 Setting /save-settings.php site_name cross site scripting *************** 📎Link: https://vuldb.com/?id.311151 *************** ⚙️Information: #Vendor: code_projects #Product: Traffic Offense Reporting System #Type: Reporting Software #Risk: problematic #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:52:15 +0200 *************** ✏️Title: CVE-2025-5663 | PHPGurukul Auto Taxi Stand Management System 1.0 search-autoortaxi.php searchdata sql injection *************** 📎Link: https://vuldb.com/?id.311152 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Auto Taxi Stand Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:55:21 +0200 *************** ✏️Title: CVE-2025-5664 | FreeFloat FTP Server 1.0 RESTART Command buffer overflow *************** 📎Link: https://vuldb.com/?id.311153 *************** ⚙️Information: #Vendor: FreeFloat #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:55:23 +0200 *************** ✏️Title: CVE-2025-5665 | FreeFloat FTP Server 1.0 XCWD Command buffer overflow *************** 📎Link: https://vuldb.com/?id.311154 *************** ⚙️Information: #Vendor: FreeFloat #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:55:24 +0200 *************** ✏️Title: CVE-2025-5666 | FreeFloat FTP Server 1.0 XMKD Command buffer overflow *************** 📎Link: https://vuldb.com/?id.311155 *************** ⚙️Information: #Vendor: FreeFloat #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:55:25 +0200 *************** ✏️Title: CVE-2025-5667 | FreeFloat FTP Server 1.0 REIN Command buffer overflow *************** 📎Link: https://vuldb.com/?id.311156 *************** ⚙️Information: #Vendor: FreeFloat #Product: FTP Server #Type: File Transfer Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:57:11 +0200 *************** ✏️Title: CVE-2025-5668 | PHPGurukul Medical Card Generation System 1.0 /admin/readenq.php ID sql injection *************** 📎Link: https://vuldb.com/?id.311157 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Medical Card Generation System #Type: Medical Device Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:57:12 +0200 *************** ✏️Title: CVE-2025-5669 | PHPGurukul Medical Card Generation System 1.0 /admin/unreadenq.php ID sql injection *************** 📎Link: https://vuldb.com/?id.311158 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Medical Card Generation System #Type: Medical Device Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 14:57:14 +0200 *************** ✏️Title: CVE-2025-5670 | PHPGurukul Medical Card Generation System 1.0 /admin/manage-card.php ID sql injection *************** 📎Link: https://vuldb.com/?id.311159 *************** ⚙️Information: #Vendor: PHPGurukul #Product: Medical Card Generation System #Type: Medical Device Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 15:01:10 +0200 *************** ✏️Title: CVE-2025-5671 | TOTOLINK N302R Plus up to 3.4.0-B20201028 HTTP POST Request /boafrm/formPortFw service_type buffer overflow *************** 📎Link: https://vuldb.com/?id.311160 *************** ⚙️Information: #Vendor: TOTOLINK #Product: N302R Plus #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 15:01:11 +0200 *************** ✏️Title: CVE-2025-5672 | TOTOLINK N302R Plus up to 3.4.0-B20201028 HTTP POST Request /boafrm/formFilter url buffer overflow *************** 📎Link: https://vuldb.com/?id.311161 *************** ⚙️Information: #Vendor: TOTOLINK #Product: N302R Plus #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 15:04:36 +0200 *************** ✏️Title: CVE-2025-5674 | code-projects Patient Record Management System 1.0 urinalysis_form.php urinalysis_id sql injection *************** 📎Link: https://vuldb.com/?id.311162 *************** ⚙️Information: #Vendor: code_projects #Product: Patient Record Management System #Type: Medical Device Software #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 15:05:47 +0200 *************** ✏️Title: CVE-2025-5675 | Campcodes Online Teacher Record Management System 1.0 bwdates-reports-details.php fromdate/todate sql injection *************** 📎Link: https://vuldb.com/?id.311163 *************** ⚙️Information: #Vendor: Campcodes #Product: Online Teacher Record Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 15:07:38 +0200 *************** ✏️Title: CVE-2025-5676 | Campcodes Online Recruitment Management System 1.0 ajax.php?action=login Username sql injection *************** 📎Link: https://vuldb.com/?id.311164 *************** ⚙️Information: #Vendor: Campcodes #Product: Online Recruitment Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security

‼️ CVE ALERT ‼️ *************** 🗓Date: Wed, 04 Jun 2025 15:07:39 +0200 *************** ✏️Title: CVE-2025-5677 | Campcodes Online Recruitment Management System 1.0 ajax.php?action=save_application position_id sql injection *************** 📎Link: https://vuldb.com/?id.311165 *************** ⚙️Information: #Vendor: Campcodes #Product: Online Recruitment Management System #Risk: critical #Local: No #Remote: Yes #Exploit: Yes #Countermeasures: Unknown *************** ♦️Join: @HackTheBox_Academy ♦️Join: @HackTheBox_Security