CVE-2025-0882: code-projects Chat System addnewmember.php sql injection
A vulnerability was found in code-projects Chat System up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user/addnewmember.php. The manipulation of the argument user leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0882?
CVE-2025-0882 has been declared as a critical vulnerability.
What software is affected by CVE-2025-0882?
CVE-2025-0882 affects the code-projects Chat System up to version 1.0.
How does CVE-2025-0882 manifest?
CVE-2025-0882 allows for SQL injection through the manipulation of the 'user' argument in the /user/addnewmember.php file.
How do I fix CVE-2025-0882?
To fix CVE-2025-0882, it is recommended to update the code-projects Chat System to a version later than 1.0.
Can CVE-2025-0882 be exploited remotely?
Yes, the vulnerability CVE-2025-0882 can be exploited remotely by an attacker.