CVE-2025-12327

A vulnerability was determined in shawon100 RUET OJ up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5. This issue affects some unknown processing of the file /description.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The vendor was contacted early about this disclosure but did not respond in any way.
References
Link Resource
https://vuldb.com/?ctiid.330104 Permissions Required VDB Entry
https://vuldb.com/?id.330104 Third Party Advisory VDB Entry
https://vuldb.com/?submit.674349 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:shawonruet:ruet_oj:*:*:*:*:*:*:*:*

History

04 Nov 2025, 13:57

Type Values Removed Values Added
References () https://vuldb.com/?ctiid.330104 - () https://vuldb.com/?ctiid.330104 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.330104 - () https://vuldb.com/?id.330104 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.674349 - () https://vuldb.com/?submit.674349 - Third Party Advisory, VDB Entry
First Time Shawonruet ruet Oj
Shawonruet
CPE cpe:2.3:a:shawonruet:ruet_oj:*:*:*:*:*:*:*:*

27 Oct 2025, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-10-27 21:15

Updated : 2025-11-04 13:57


NVD link : CVE-2025-12327

Mitre link : CVE-2025-12327

CVE.ORG link : CVE-2025-12327


JSON object : View

Products Affected

shawonruet

  • ruet_oj
CWE
CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')