CVE-2025-13580: code-projects Library System mail.php sql injection
A vulnerability was determined in code-projects Library System 1.0. Affected is an unknown function of the file /mail.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13580?
CVE-2025-13580 is considered a high-severity vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-13580?
To fix CVE-2025-13580, ensure input validation and use parameterized queries in the code to mitigate SQL injection risks.
Who is affected by CVE-2025-13580?
Users of the code-projects Library System version 1.0 are affected by CVE-2025-13580.
Can CVE-2025-13580 be exploited remotely?
Yes, CVE-2025-13580 can be exploited remotely by manipulating the ID argument in the /mail.php file.
What is the nature of the vulnerability in CVE-2025-13580?
CVE-2025-13580 is an SQL injection vulnerability that occurs due to improper handling of user input.