CVE 6.9 MEDIUM

BiggiDroid Simple PHP CMS Admin Login login.php sql injection_CVE-2025-15263

6.9 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Description

A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected is an unknown function of the file /admin/login.php of the component Admin Login. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.

Basic Information

ID CVE-2025-15263
Source VulDB
Published Dec 30, 2025 at 18:32
Modified Dec 30, 2025 at 19:20

Affected Product

Vendor BiggiDroid
Product Simple PHP CMS
Version 1.0
Affected Versions BiggiDroid Simple PHP CMS 1.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.