CVE 6.9 MEDIUM

code-projects Exam Form Submission delete_s7.php sql injection_CVE-2025-8326

6.9 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Description

A vulnerability classified as critical has been found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/delete_s7.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Basic Information

ID CVE-2025-8326
Source VulDB
Published Jul 30, 2025 at 13:02
Modified Jul 30, 2025 at 14:48

Affected Product

Vendor code-projects
Product Exam Form Submission
Version 1.0
Affected Versions code-projects Exam Form Submission 1.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.