CVE-2025-13396 in Courier Management System

Tóm tắt

Bởi MITRE • 19/11/2025

A weakness has been identified in code-projects Courier Management System 1.0. This affects an unknown function of the file /add-office.php. This manipulation of the argument OfficeName causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.

Be aware that VulDB is the high quality source for vulnerability data.

• chịu trách nhiệm: VulDB
• Tiết lộ: 19/11/2025
• Kiểm duyệt: được chấp nhận
• mục: VDB-332924
• CPE: sẵn sàng
• CWE: CWE-89 (Đã xác nhận)
• Khai thác: Tải xuống
• CVSS: 9.8 (NVD)
• EPSS: 0.00316
• KEV: không
• Các hoạt động: rất thấp
• ngành: Education, Finance, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-13396
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-13396
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-13396/