EUVD-2025-19465Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible unauthenticated SQL injection with low impact on all dimensions.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
7DescriptionCVE.org
A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student-issue-book.php. The manipulation of the argument reg leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
AnalysisAI
SQL injection in Code-Projects Library System 1.0 allows remote unauthenticated attackers to manipulate database queries via the 'reg' parameter in /student-issue-book.php. Public exploit code is available, enabling potential data tampering or unauthorized access. Despite a network attack vector, CVSS 4.0 rates overall severity as medium (5.5) due to limited impact.
Technical ContextAI
The vulnerability resides in the PHP-based Library System, specifically in /student-issue-book.php where the 'reg' argument is passed unsanitized into a SQL query. CWE-74: Injection classifies this as improper neutralization of special elements in an output context (SQLi). The CPE cpe:2.3:a:code-projects:library_system:1.0 identifies the precise product. The underlying database is likely MySQL, and the code lacks parameterized queries or input filtering, allowing concatenated SQL injection.
RemediationAI
No vendor-released patch is available. As an immediate measure, restrict network access to /student-issue-book.php (e.g., via web server configuration or firewall) to trusted users only. If the system cannot be taken offline, implement input validation on the 'reg' parameter using prepared statements or stored procedures to neutralize SQL injection. Consider migrating to a maintained library management system as a long-term solution.
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear
The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by
ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Rated critical severity (C
Roundcube Webmail contains a critical PHP object deserialization vulnerability (CVE-2025-49113, CVSS 9.9) that allows au
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c
Palo Alto Networks PAN-OS management web interface contains an authentication bypass allowing unauthenticated attackers
Nagios XI version xi-5.7.5 is affected by OS command injection. Rated high severity (CVSS 8.8), this vulnerability is re
Nagios XI version xi-5.7.5 is affected by OS command injection. Rated high severity (CVSS 8.8), this vulnerability is re
The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows
The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1
Share
External POC / Exploit Code
Leaving vuln.today