CVE-2025-13303: code-projects Courier Management System search-edit.php sql injection
A vulnerability was determined in code-projects Courier Management System 1.0. Affected by this issue is some unknown functionality of the file /search-edit.php. This manipulation of the argument Consignment causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13303?
CVE-2025-13303 is classified as a critical SQL injection vulnerability in the Courier Management System.
How does CVE-2025-13303 affect the Courier Management System?
CVE-2025-13303 allows attackers to manipulate the 'Consignment' argument, which could lead to unauthorized database access.
Can CVE-2025-13303 be exploited remotely?
Yes, CVE-2025-13303 can be exploited remotely, allowing attackers to execute SQL queries on the affected system.
What are the implications of exploiting CVE-2025-13303?
Exploitation of CVE-2025-13303 can lead to data leakage, database corruption, or full system compromise.
How do I fix CVE-2025-13303?
To fix CVE-2025-13303, sanitize inputs properly and implement prepared statements or stored procedures to prevent SQL injection.