CVE-2025-13300
Last modified
CVE-2025-13300 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. A vulnerability has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. Affected is an unknown function of the file /settings/controller.php. EPSS estimates a 0.34% chance of exploitation in the next 30 days.
Description
A vulnerability has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. Affected is an unknown function of the file /settings/controller.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Itsourcecode | Web-Based Internet Laboratory Management System | 1.0 |
References
- https://github.com/f14g-orz/CVE/issues/6Exploit, Issue Tracking, Third Party Advisory
- https://itsourcecode.com/Product
- https://vuldb.com/?ctiid.332640Permissions Required, VDB Entry
- https://vuldb.com/?id.332640Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.691790Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-13300?
How severe is CVE-2025-13300?
How do I fix CVE-2025-13300?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-13295Insertion of Sensitive Information Into Sent Data vulnerabil…7.5
- CVE-2025-13296Cross-Site Request Forgery (CSRF) vulnerability in Tekrom Te…5.4
- CVE-2025-13297A security vulnerability has been detected in itsourcecode W…9.8
- CVE-2025-13298A vulnerability was detected in itsourcecode Web-Based Inter…9.8
- CVE-2025-13299A flaw has been found in itsourcecode Web-Based Internet Lab…9.8
- CVE-2025-1330IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and …7.8
- CVE-2025-13301A vulnerability was found in itsourcecode Web-Based Internet…9.8
- CVE-2025-13302A vulnerability was identified in code-projects Courier Mana…9.8
- CVE-2025-13303A vulnerability was determined in code-projects Courier Mana…9.8
- CVE-2025-13304A security flaw has been discovered in D-Link DWR-M920, DWR-…8.8
- CVE-2025-13305A weakness has been identified in D-Link DWR-M920, DWR-M921,…9.8
- CVE-2025-13306A security vulnerability has been detected in D-Link DWR-M92…8.8
Are you affected by CVE-2025-13300?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST