CVE-2025-12255: code-projects Online Event Judging System add_contestant.php sql injection

Published Oct 27, 2025

Updated

A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of the file /addcontestant.php. Performing manipulation of the argument fullname results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited.

Affected Software

2 affected components

Code-projects Online Event Judging System

Carmelo Online Event Judging System=1.0

Event History

Oct 27, 2025

CVE Published

via MITRE·09:02 AM

Data Sourced

via MITRE·09:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:15 AM

DescriptionSeverityWeaknessAffected Software

Oct 8, 2026

Event

via NVD·12:41 PM

Frequently Asked Questions

What is the severity of CVE-2025-12255?

The severity of CVE-2025-12255 is classified as a medium risk due to its potential for SQL injection.

How do I fix CVE-2025-12255?

To fix CVE-2025-12255, sanitize and validate user input in the fullname argument of the /add_contestant.php file to prevent SQL injection.

Who is affected by CVE-2025-12255?

CVE-2025-12255 affects users of the code-projects Online Event Judging System version 1.0.

What type of vulnerability is CVE-2025-12255?

CVE-2025-12255 is identified as an SQL injection vulnerability.

Can CVE-2025-12255 be exploited remotely?

Yes, CVE-2025-12255 allows for remote exploitation if the vulnerability is not mitigated.