6.9
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Description
A security vulnerability has been detected in code-projects Prison Management System 2.0. Impacted is an unknown function of the file /admin/search1.php. The manipulation of the argument keyname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Basic Information
ID
CVE-2025-14590
Source
VulDB
Published
Dec 13, 2025 at 12:02
Affected Product
Vendor
code-projects
Product
Prison Management System
Version
2.0
Affected Versions
code-projects Prison Management System 2.0