CVE-2025-13300

Severity CVSS v4.0:
MEDIUM
Type:
CWE-74 Injection
Publication date:
17/11/2025
Last modified:
18/11/2025

Description

A vulnerability has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. Affected is an unknown function of the file /settings/controller.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.