CVE-2025-14589: code-projects Prison Management System search.php sql injection
A weakness has been identified in code-projects Prison Management System 2.0. This issue affects some unknown processing of the file /admin/search.php. Executing a manipulation of the argument keyname can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14589?
CVE-2025-14589 is considered a high severity vulnerability due to its potential for remote SQL injection.
How does CVE-2025-14589 affect the Prison Management System?
CVE-2025-14589 affects the processing of the file /admin/search.php, allowing manipulation of the argument keyname for SQL injection.
How can I fix CVE-2025-14589?
To fix CVE-2025-14589, sanitize all user inputs and implement prepared statements to avoid SQL injection risks.
What are the potential impacts of exploiting CVE-2025-14589?
Exploiting CVE-2025-14589 can lead to unauthorized access to the database, data leakage, and data manipulation.
Is CVE-2025-14589 a remote attack vector?
Yes, CVE-2025-14589 can be exploited remotely, making it particularly dangerous for web applications.