A vulnerability described as critical has been identified in Surbowl dormitory-management-php up to 9f1d9d1f528cabffc66fda3652c56ff327fda317. Affected is an unknown function of the file /admin/violation_add.php?id=2. Such manipulation of the argument ID leads to sql injection. This vulnerability only affects products that are no longer supported by the maintainer.
This vulnerability is listed as CVE-2025-9150. The attack may be performed from a remote location. In addition, an exploit is available.
This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed.
