CVE-2025-10405

A vulnerability was determined in itsourcecode Baptism Information Management System 1.0. Affected is an unknown function of the file /listbaptism.php. This manipulation of the argument bapt_id causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cna@vuldb.com

Published

2025-09-14

Last modified

2025-09-15

Weaknesses

CWE-74, CWE-89

Affected products

• Baptism Information Management System (Itsourcecode)

References

• https://github.com/peri0d/my_cve/issues/4
• https://itsourcecode.com/
• https://vuldb.com/?ctiid.323840
• https://vuldb.com/?id.323840
• https://vuldb.com/?submit.646904