CVE-2025-5205

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in 1000 Projects Daily College Class Work Report Book 1.0. Affected is an unknown function of the file /dcwr_entry.php. The manipulation of the argument Date leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
1000 Projects	Daily College Class Work Report Book	1.0

References

https://1000projects.org/Product
https://github.com/Jackie1732/CVE/issues/1Exploit, Third Party Advisory
https://vuldb.com/?ctiid.310302Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.310302Third Party Advisory, VDB Entry
https://vuldb.com/?submit.582110Third Party Advisory, VDB Entry
https://github.com/Jackie1732/CVE/issues/1Exploit, Third Party Advisory

Timeline

Published: May 26, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-520506.5In Frappe ERPNext 15.57.5, the function get_loyalty_program_details_with_points() at erpnext/accounts/doctype/loyalty_program/loyalty_progra CVE-2025-520539.8TOTOLINK X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerability in the sub_417D74 function via the file_name CVE-2025-520545.3An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the de CVE-2025-52069.8A vulnerability classified as critical was found in Pixelimity 1.0. Affected by this vulnerability is an unknown functionality of the file /CVE-2025-52079.8A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. Affected by this CVE-2025-520746.1PHPGURUKUL Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) due to lack of input sanitization in the quantity paramete CVE-2025-520786.5File upload vulnerability in Writebot AI Content Generator SaaS React Template thru 4.0.0, allowing remote attackers to gain escalated privi CVE-2025-520798.8The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access Control and is vulnerable to Unverified Password Ch CVE-2025-52089.8A vulnerability, which was classified as critical, was found in SourceCodester Online Hospital Management System 1.0. This affects an unknow CVE-2025-520806.5In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow vulnerability exists in the HTTPD service through the usb_device.cgi endpo CVE-2025-520816.5In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow vulnerability exists in the HTTPD service through the usb_device.cgi endpo CVE-2025-520826.5In Netgear XR300 V1.0.3.38_10.3.30, a stack-based buffer overflow exists in the HTTPD service through the usb_device.cgi endpoint. The vulne