ORETNOM23 Survey Application System vulnerabilities

3 CVEs affecting ORETNOM23 Survey Application System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-13060, published 2025-11-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-50766, published 2024-11-07. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. SourceCodester Survey Application System 1.0 is vulnerable to SQL Injection in takeSurvey.php via the id parameter.
CVE-2025-13060, published 2025-11-12. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /view_survey.php. Such manipulation of the argument ID leads…
CVE-2025-12929, published 2025-11-10. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function save_user/update_user of the file /LoginRegistration.php. Executing manipulation of the argument…