CVE-2025-9002

A vulnerability was identified in Surbowl dormitory-management-php 1.0. This affects an unknown part of the file login.php. The manipulation of the argument Account leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS

No CVSS.

Configurations

No configuration.

History

15 Aug 2025, 13:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 7.3
v2 : unknown
v3 : unknown
CWE CWE-89
CWE-74

15 Aug 2025, 03:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-08-15 03:15

Updated : 2025-08-15 13:15


NVD link : CVE-2025-9002

Mitre link : CVE-2025-9002


JSON object : View

Products Affected

No product.

CWE

No CWE.