CVE-2025-10841: code-projects Online Bidding System weweee.php sql injection

Published Sep 23, 2025

Updated

A security vulnerability has been detected in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administrator/weweee.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

Affected Software

2 affected components

Code-projects Online Bidding System

Fabian Online Bidding System=1.0

Event History

Sep 23, 2025

CVE Published

via MITRE·05:32 AM

Data Sourced

via MITRE·05:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10841?

CVE-2025-10841 has a critical severity level due to its potential for remote SQL injection.

How do I fix CVE-2025-10841?

To mitigate CVE-2025-10841, sanitize and validate all user input to prevent SQL injection.

What types of systems are affected by CVE-2025-10841?

CVE-2025-10841 affects the Code-projects Online Bidding System version 1.0.

Can CVE-2025-10841 be exploited remotely?

Yes, CVE-2025-10841 can be exploited remotely through the vulnerable script located at /administrator/weweee.php.

What kind of attack can CVE-2025-10841 enable?

CVE-2025-10841 can enable SQL injection attacks, potentially leading to data leaks or unauthorized data manipulation.