CVE-2025-14647: code-projects Computer Book Store admin_delete.php sql injection
Published Dec 14, 2025
·Updated
A weakness has been identified in code-projects Computer Book Store 1.0. Affected is an unknown function of the file /admindelete.php. This manipulation of the argument bookisbn causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited.
Affected Software
2 affected components
Code-projects Computer Book Store
Carmelo Computer Book Store=1.0
Event History
Dec 14, 2025
CVE Published
via MITRE·06:32 AM
Data Sourced
via MITRE·06:32 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-14647?
CVE-2025-14647 has a high severity due to its potential for remote SQL injection attacks.
2
How do I fix CVE-2025-14647?
To fix CVE-2025-14647, ensure proper input validation and use parameterized queries to prevent SQL injection.
3
Which version of Code-projects Computer Book Store is affected by CVE-2025-14647?
CVE-2025-14647 affects Code-projects Computer Book Store version 1.0.
4
Can CVE-2025-14647 be exploited remotely?
Yes, CVE-2025-14647 can be exploited remotely due to its SQL injection vulnerability.
5
What component of Code-projects Computer Book Store is vulnerable in CVE-2025-14647?
The vulnerable component in CVE-2025-14647 is the /admin_delete.php file.