nuz007 smsboom d.php cross site scripting_CVE-2025-10945

5.1 / 10

MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X

Description

A security vulnerability has been detected in nuz007 smsboom up to 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674. Impacted is an unknown function of the file d.php. Such manipulation of the argument hm leads to cross site scripting. The attack may be launched remotely. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases.

Basic Information

ID CVE-2025-10945

Source VulDB

Published Sep 25, 2025 at 12:32

Modified Sep 25, 2025 at 13:06

Affected Product

Vendor nuz007

Product smsboom

Version 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674

Affected Versions nuz007 smsboom 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674

CWE Classification

CWE-79 CWE-94

References

{
    "lastseen": "",
    "description": "A security vulnerability has been detected in nuz007 smsboom up to 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674. Impacted is an unknown function of the file d.php. Such manipulation of the argument hm leads to cross site scripting. The attack may be launched remotely. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases.",
    "published": "2025-09-25T12:32:08.793Z",
    "modified": "2025-09-25T13:06:03.245Z",
    "type": "cve",
    "title": "nuz007 smsboom d.php cross site scripting",
    "source": "VulDB",
    "references": "https://vuldb.com/?id.325815\nhttps://vuldb.com/?ctiid.325815\nhttps://vuldb.com/?submit.651886\nhttps://github.com/nuz007/smsboom/blob/main/d.php#L25",
    "id": "CVE-2025-10945",
    "bulletinFamily": "",
    "cwe": [
        "CWE-79",
        "CWE-94"
    ],
    "cvelist": null,
    "sourceData": "nuz007 smsboom 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674",
    "sourceHref": "",
    "cvss": {
        "score": 5.1,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "smsboom",
    "version": "01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674",
    "vendor": "nuz007",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}