github.comexploit
https://github.com/YZS17/CVE/blob/main/Jasmin-Ransomware/sqli_password.md CVE-2025-6095
MEDIUM
codesiddhant Jasmin Ransomware checklogin.php sql injection
Record summary
CVE-2025-6095 has a selected CVSS score of 6.9 (medium); EIP currently links 1 catalogued exploit.
Description
A vulnerability, which was classified as critical, was found in codesiddhant Jasmin Ransomware 1.0.1. Affected is an unknown function of the file /checklogin.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 16, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Jasmin RansomwareBrowse codesiddhant / Jasmin Ransomware | CVE List | 1.0.1 | affected |
Proofs of concept
1Catalogued exploits
MetasploitJasmin Ransomware Web Server Unauthenticated SQL InjectionMetasploit auxiliary PoCby chebuya +1 moreNot analyzed1 file
References
7github.comrelated
https://github.com/YZS17/CVE/blob/main/Jasmin-Ransomware/sqli_username.md nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-6095 VDB-312564 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions required
https://vuldb.com/?ctiid.312564 VDB-312564 | codesiddhant Jasmin Ransomware checklogin.php sql injectionvdb entryTechnical description
https://vuldb.com/?id.312564 Submit #588833 | Jasmin-Ransomware V1.0.1 SQL InjectionThird-party advisory
https://vuldb.com/?submit.588833 Submit #588834 | Jasmin-Ransomware V1.0.1 SQL Injection (Duplicate)Third-party advisory
https://vuldb.com/?submit.588834