A vulnerability classified as critical was found in 1000projects Online Notice Board 1.0. This vulnerability affects unknown code of the file /register.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
References
| Link | Resource |
|---|---|
| https://github.com/ubfbuz3/cve/issues/17 | Exploit Issue Tracking |
| https://github.com/ubfbuz3/cve/issues/17 | Exploit Issue Tracking |
| https://vuldb.com/?ctiid.311140 | Permissions Required Third Party Advisory VDB Entry |
| https://vuldb.com/?id.311140 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.589819 | Third Party Advisory VDB Entry |
Configurations
History
10 Jun 2025, 15:05
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/ubfbuz3/cve/issues/17 - Exploit, Issue Tracking | |
| References | () https://vuldb.com/?submit.589819 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?ctiid.311140 - Permissions Required, Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?id.311140 - Third Party Advisory, VDB Entry | |
| First Time |
1000projects online Notice Board
1000projects |
|
| CWE | CWE-89 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:a:1000projects:online_notice_board:1.0:*:*:*:*:*:*:* |
05 Jun 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
| CWE | CWE-74 |
05 Jun 2025, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-05 10:15
Updated : 2025-06-10 15:05
NVD link : CVE-2025-5650
Mitre link : CVE-2025-5650
JSON object : View
Products Affected
1000projects
- online_notice_board
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')