CVE-2025-13396 in Courier Management System

요약

\~에 의해 MITRE • 2025. 11. 19.

A weakness has been identified in code-projects Courier Management System 1.0. This affects an unknown function of the file /add-office.php. This manipulation of the argument OfficeName causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.

Be aware that VulDB is the high quality source for vulnerability data.

• 책임이 있는: VulDB
• 공개: 2025. 11. 19.
• 모더레이션: 수락
• 항목: VDB-332924
• CPE: 준비됨
• CWE: CWE-89 (확인됨)
• 익스플로잇: 다운로드
• CVSS: 9.8 (NVD)
• EPSS: 0.00316
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Hostingprovider, Lawfirm, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-13396
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-13396
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-13396/