CVE-2025-0882code-projects Chat System addnewmember.php sql injection

Beschreibung

A vulnerability was found in code-projects Chat System up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user/addnewmember.php. The manipulation of the argument user leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• VDB-294127 | code-projects Chat System addnewmember.php sql injection vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
• VDB-294127 | CTI Indicators (IOB, IOC, TTP, IOA) signaturepermissions-requiredPermissions RequiredVDB Entry
• Submit #491463 | code-projects Chat System Using PHP With Source Code 1.0 SQL Injection third-party-advisoryThird Party AdvisoryVDB Entry
• https://github.com/LamentXU123/cve/blob/main/sql_injection3.md exploitExploitThird Party Advisory
• https://code-projects.org/ productProduct