Skip to content

CyberSecBulletin

CVEs published on January 5, 2025

10 vulnerabilities, ordered with the most urgent first.

9.8 Critical severity
mysiteforme: Deserialization of Untrusted Data
CVE-2024-13136Jan 5, 2025Wangl1989
9.8 Critical severity
Travel Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-0229Jan 5, 2025code-projects
9.8 Critical severity
Responsive Hotel Site: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-0230Jan 5, 2025code-projects
9.8 Critical severity
Project Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-0233Jan 5, 2025CodeZips
8.8 High severity
mysiteforme: Server-Side Request Forgery
CVE-2024-13139Jan 5, 2025Wangl1989
8.8 High severity
Gym Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-0231Jan 5, 2025CodeZips
8.8 High severity
Blood Bank Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-0232Jan 5, 2025CodeZips
8.8 High severity
studentmanager: Improper Access Control
CVE-2024-13133Jan 5, 2025ZeroWdd
8.8 High severity
studentmanager: Improper Access Control
CVE-2024-13134Jan 5, 2025ZeroWdd
8.8 High severity
mysiteforme: Unrestricted Upload of File with Dangerous Type
CVE-2024-13138Jan 5, 2025Wangl1989