CVE-2025-12316: code-projects Courier Management System edit-courier.php sql injection
A vulnerability was identified in code-projects Courier Management System 1.0. This impacts an unknown function of the file /courier/edit-courier.php. The manipulation of the argument OfficeName leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12316?
CVE-2025-12316 is categorized as a high severity vulnerability due to its potential for remote SQL injection.
How do I fix CVE-2025-12316?
To fix CVE-2025-12316, validate and sanitize the input for the OfficeName parameter in the /courier/edit-courier.php file.
Can CVE-2025-12316 be exploited remotely?
Yes, CVE-2025-12316 can be exploited remotely, allowing attackers to perform SQL injection attacks.
What software is affected by CVE-2025-12316?
CVE-2025-12316 affects Code-projects Courier Management System version 1.0.
What type of attack is associated with CVE-2025-12316?
CVE-2025-12316 is associated with SQL injection attacks due to improper handling of the OfficeName argument.