PT-2025-44051 · Unknown · Shawon100 Ruet Oj

Maninhuguitar · Published 2025-10-27 · Updated 2025-11-04 · CVE-2025-12329

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions shawon100 RUET OJ versions up to 18fa45b0a669fa1098a0b8fc629cf6856369d9a5

Description A security flaw exists in shawon100 RUET OJ. Manipulation of the ID argument in the /details.php file can lead to SQL injection. Remote exploitation is possible. The exploit has been publicly released. The vendor was contacted but did not respond.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-12329

Affected Products

Shawon100 Ruet Oj

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-12329 · Security Note
• https://osv.dev/vulnerability/CVE-2025-12329 · Vendor Advisory
• https://t.me/cveNotify/141591 · Telegram Post
• https://t.me/cveNotify/140566 · Telegram Post
• https://vuldb.com/?submit.674401 · Note
• https://vuldb.com/?id.330106 · Note
• https://t.me/CVEtracker/35900 · Telegram Post
• https://vuldb.com/?ctiid.330106 · Note
• https://twitter.com/VulmonFeeds/status/1983031282633261133 · Twitter Post