CVE-2025-12914Medium· 4.7▾ SunlitA vulnerability has been found in aaPanel BaoTa up to 11.2.x. This vulnerability affects unknown code of the file /database?action=GetDatabaseAccess of the component Backend. The manipulation of the argument Name leads to sql injection. …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 25.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
A vulnerability has been found in aaPanel BaoTa up to 11.2.x. This vulnerability affects unknown code of the file /database?action=GetDatabaseAccess of the component Backend. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 11.3.0 is able to resolve this issue. It is recommended to upgrade the affected component.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-13485High· 7.3A security flaw has been discovered in itsourcecode Online File Management System 1.0
CVE-2025-13302Medium· 4.7A vulnerability was identified in code-projects Courier Management System 1.0
CVE-2025-13303Medium· 6.3A vulnerability was determined in code-projects Courier Management System 1.0
CVE-2025-13300High· 7.3A vulnerability has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0
CVE-2025-13301High· 7.3A vulnerability was found in itsourcecode Web-Based Internet Laboratory Management System 1.0
CVE-2025-13298High· 7.3A vulnerability was detected in itsourcecode Web-Based Internet Laboratory Management System 1.0