CVE-2025-9150 - Surbowl dormitory-management-php violation_add.php sql injection

Back Back to CVE browser

MEDIUM

Surbowl dormitory-management-php violation_add.php sql injection

Published Aug 19, 2025

6.9

MEDIUM

CVSS 4.0

EPSS 0.33%

Description

A vulnerability was identified in Surbowl dormitory-management-php up to 9f1d9d1f528cabffc66fda3652c56ff327fda317. Affected is an unknown function of the file /admin/violation_add.php?id=2. Such manipulation of the argument ID leads to sql injection. The attack may be performed from a remote location. The exploit is publicly available and might be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

Vendor Surbowl Product Dormitory-Management-PHP Default
n/a
- Version
  
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Surbowl

Dormitory-Management-PHP

n/a

Version	Status	Constraints
	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-89

SQL Injection

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-25197
Advisory
https://github.com/xinzfy/cve/issues/1
exploitissue-tracking
https://vuldb.com/?ctiid.320529
signaturepermissions-required
https://vuldb.com/?id.320529
vdb-entrytechnical-description
https://vuldb.com/?submit.629618
third-party-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-25197		Advisory
https://github.com/xinzfy/cve/issues/1		exploitissue-tracking
https://vuldb.com/?ctiid.320529		signaturepermissions-required
https://vuldb.com/?id.320529		vdb-entrytechnical-description
https://vuldb.com/?submit.629618		third-party-advisory