EUVD-2025-20498Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessSend crafted HTTP request to /login.php
-
ExploitSQL injection in User parameter
-
ExecutionBypass authentication
-
ImpactAccess unauthorized data or system
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Input neutralization, injection prevention
|
| Exploitation Conditions | No special conditions - remote unauthenticated exploitation against default configurations of code-projects Staff Audit System 1.0 via /login.php. The vulnerable parameter is User. No authentication, user interaction, or special network access is required beyond reachability of the web interface. |
| Impact | CVSS 4.0 base score of 5.5 reflects a medium-severity issue with low impact on confidentiality, integrity, and availability. The attack vector is network, complexity low, no privileges or user interaction required, and exploitation is expected (E:P in vector). The EPSS score of 0.06% (19th percentile) indicates low likelihood of exploitation in the wild. A public exploit is available, but the product is not widely deployed, reducing real-world risk. No CISA KEV listing; SSVC would likely rate this as 'Medium' risk given automatable exploitation but low prevalence. |
| Exploit ScenarioDerived | An unauthenticated attacker sends a crafted HTTP POST request to /login.php with a malicious SQL payload in the User parameter (e.g., ' OR '1'='1). The application executes the injection, allowing the attacker to bypass authentication and gain access to admin panels or extract database contents. A public exploit demonstration exists at https://github.com/kn1g78/cve/blob/main/staff1/staff1.md. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jul 27, 2026
SQL injection in code-projects Staff Audit System 1.0 allows unauthenticated remote attackers to manipulate login queries via the User parameter in /login.php, potentially leading to unauthorized data access or authentication bypass. A public exploit is available, but EPSS probability is low (0.06%), suggesting limited exploitation pressure. No CISA KEV listing exists.
RemediationAI
No official patch has been released by the vendor. Immediate remediation should involve replacing direct SQL query construction with parameterized prepared statements or using an ORM. As a workaround, implement strict input validation (allowlisting of expected characters) on the User parameter, deploy a Web Application Firewall (WAF) to block SQL injection patterns, and restrict network access to the /login.php endpoint to trusted IPs only. Note that WAF bypass techniques exist, so code-level fixes are strongly preferred. If the product is not critical, consider migrating to an actively maintained alternative.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability is a classic SQL injection (CWE-74) in a PHP-based web application. The Staff Audit System uses a login form where user-supplied input (the User argument) is directly concatenated into SQL queries without sanitization or parameterization, enabling attackers to inject arbitrary SQL commands. The CPE identifies the affected product as carmelo:staff_audit_system:1.0, indicating a specific version of this niche tool.
Know when Staff Audit System gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Unauthenticated remote SQL injection, low impact on all three security objectives.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
5DescriptionCVE.org
A vulnerability, which was classified as critical, has been found in code-projects Staff Audit System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument User leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Threat Intelligence Overview
NVD
CVE.org
EPSS
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
SQL injection exploits the way applications construct database queries by mixing user input directly into SQL statements.
More in Staff Audit System
View allUnrestricted file upload in Staff Audit System 1.0 allows remote attackers to upload arbitrary files via the /test.php e
SQL injection in Staff Audit System 1.0 allows remote attackers with low privileges to execute arbitrary SQL commands vi
SQL injection in Staff Audit System 1.0 enables remote authenticated attackers to manipulate database queries via the up
Exploit-DB