CVE-2025-13302: code-projects Courier Management System add-new-officer.php sql injection
A vulnerability was identified in code-projects Courier Management System 1.0. This affects an unknown part of the file /add-new-officer.php. Such manipulation of the argument ManagerName leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13302?
CVE-2025-13302 is classified as a high-severity vulnerability due to its potential for remote exploitation through SQL injection.
How do I fix CVE-2025-13302?
To fix CVE-2025-13302, sanitize and validate user inputs, specifically the ManagerName argument in the add-new-officer.php file, to prevent SQL injection attacks.
What systems are affected by CVE-2025-13302?
CVE-2025-13302 affects the Code-projects Courier Management System version 1.0.
Can CVE-2025-13302 be exploited remotely?
Yes, CVE-2025-13302 can be exploited remotely by manipulating the ManagerName argument.
What type of vulnerability is CVE-2025-13302?
CVE-2025-13302 is an SQL injection vulnerability that allows attackers to manipulate database queries.