CVE-2025-10103: code-projects Online Event Judging System home.php sql injection

Published Sep 8, 2025

Updated

A weakness has been identified in code-projects Online Event Judging System 1.0. This impacts an unknown function of the file /home.php. Executing manipulation of the argument mainevent can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be exploited.

Affected Software

2 affected components

Code-projects Online Event Judging System

Carmelo Online Event Judging System=1.0

Event History

Sep 8, 2025

CVE Published

via MITRE·07:02 PM

Data Sourced

via MITRE·07:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10103?

CVE-2025-10103 has been classified as a medium-severity SQL injection vulnerability.

How do I fix CVE-2025-10103?

To fix CVE-2025-10103, sanitize and validate all user inputs, especially the main_event argument in the /home.php file.

What impacts does CVE-2025-10103 have on the system?

CVE-2025-10103 allows remote attackers to perform SQL injection, potentially compromising the database.

Can CVE-2025-10103 be exploited remotely?

Yes, CVE-2025-10103 can be exploited remotely by manipulating the main_event argument.

Which software is affected by CVE-2025-10103?

CVE-2025-10103 affects code-projects Online Event Judging System versions 1.0.