CVE-2025-12326
Last modified
CVE-2025-12326 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A vulnerability was found in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. This vulnerability affects unknown code of the file /process.php of the component POST Request Handler. EPSS estimates a 0.41% chance of exploitation in the next 30 days.
Description
A vulnerability was found in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. This vulnerability affects unknown code of the file /process.php of the component POST Request Handler. The manipulation of the argument un results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Shawonruet | Ruet Oj | <= 2022-10-19 |
References
- https://vuldb.com/?ctiid.330103Permissions Required, VDB Entry
- https://vuldb.com/?id.330103Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.674322Exploit, Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-12326?
How severe is CVE-2025-12326?
How do I fix CVE-2025-12326?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-12316A vulnerability was identified in code-projects Courier Mana…9.8
- CVE-2025-12317When internal roles are removed from a user within the WSO2 …5
- CVE-2025-1232The Site Reviews WordPress plugin before 7.2.5 does not prop…8.8
- CVE-2025-12322A flaw has been found in Tenda CH22 1.0.0.1. Affected by thi…8.8
- CVE-2025-12324The TablePress – Tables in WordPress made easy plugin for Wo…6.4
- CVE-2025-12325A vulnerability has been found in SourceCodester Best Salon …9.8
- CVE-2025-12327A vulnerability was determined in shawon100 RUET OJ up to 18…6.5
- CVE-2025-12328A vulnerability was identified in shawon100 RUET OJ up to 18…6.5
- CVE-2025-12329A security flaw has been discovered in shawon100 RUET OJ up …6.5
- CVE-2025-1233The Lafka Plugin for WordPress is vulnerable to unauthorized…4.3
- CVE-2025-12330A security flaw has been discovered in Willow CMS up to 1.4.…4.8
- CVE-2025-12331A weakness has been identified in Willow CMS up to 1.4.0. Im…7.2
Are you affected by CVE-2025-12326?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST