CVE-2025-12243: code-projects Client Details System GET Parameter welcome.php sql injection

Published Oct 27, 2025

Updated

A vulnerability was found in code-projects Client Details System 1.0. Affected by this issue is some unknown functionality of the file clientdetails/welcome.php of the component GET Parameter Handler. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used.

Affected Software

2 affected components

Code-projects Client Details System

Fabian Client Details System=1.0

Event History

Oct 27, 2025

CVE Published

via MITRE·07:02 AM

Data Sourced

via MITRE·07:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

DescriptionSeverityWeaknessAffected Software

Oct 8, 2026

Event

via NVD·12:43 PM

Frequently Asked Questions

What is the severity of CVE-2025-12243?

CVE-2025-12243 has a high severity due to its potential for SQL injection, which can compromise database security.

How do I fix CVE-2025-12243?

To fix CVE-2025-12243, sanitize and validate user inputs for the ID parameter in the file clientdetails/welcome.php.

What are the risks associated with CVE-2025-12243?

The risks of CVE-2025-12243 include unauthorized access to database data, data manipulation, and potential system compromise.

What software is affected by CVE-2025-12243?

CVE-2025-12243 affects Code-projects Client Details System version 1.0.

Can CVE-2025-12243 be exploited remotely?

Yes, CVE-2025-12243 can be exploited remotely through manipulated HTTP requests targeting the vulnerable ID parameter.