CVE-2025-10405

CriticalCVSS 9.8/10Last modified Sep 30, 2026

Description

A vulnerability was determined in itsourcecode Baptism Information Management System 1.0. Affected is an unknown function of the file /listbaptism.php. This manipulation of the argument bapt_id causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
itsourcecode	Baptism Information Management System	1.0

References

https://github.com/peri0d/my_cve/issues/4Exploit, Issue Tracking, Third Party Advisory
https://itsourcecode.com/Product
https://vuldb.com/?ctiid.323840Permissions Required, VDB Entry
https://vuldb.com/?id.323840Third Party Advisory, VDB Entry
https://vuldb.com/?submit.646904Third Party Advisory, VDB Entry

Timeline

Published: Sep 14, 2025
Last modified: Sep 30, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-104065.5The BlindMatrix e-Commerce WordPress plugin before 3.1 does not validate some shortcode attributes before using them to generate paths passe CVE-2025-104078.8A vulnerability was identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of t CVE-2025-104088.8A security flaw has been discovered in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionality of th CVE-2025-104098.8A weakness has been identified in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /rms.php?page=users. E CVE-2025-10419.8An improper input validation discovered in Avaya Call Management System could allow an unauthorized remote command via a specially craft CVE-2025-104109.8A security vulnerability has been detected in SourceCodester Link Status Checker 1.0. This vulnerability affects unknown code of the file in CVE-2025-104116.1A vulnerability was detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown proce CVE-2025-104129.8The Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) plugin for WordPress is vulnerable to arbitrary file CVE-2025-104139.8A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. The affected element is an unknown function of the file CVE-2025-104149.8A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. The impacted element is an unknown function of the file /ajax CVE-2025-104159.8A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown function of the file /ajax.php?a CVE-2025-104169.8A vulnerability was identified in Campcodes Grocery Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?a