CVE-2025-14939: code-projects Online Appointment Booking System deletemanager.php sql injection
A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the file /admin/deletemanager.php. The manipulation of the argument managername results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14939?
CVE-2025-14939 is classified as a high severity vulnerability due to the potential for SQL injection.
How do I fix CVE-2025-14939?
To fix CVE-2025-14939, ensure proper sanitization of user inputs and implement prepared statements in the code managing database operations.
What systems are affected by CVE-2025-14939?
CVE-2025-14939 affects the code-projects Online Appointment Booking System version 1.0.
What type of vulnerability is CVE-2025-14939?
CVE-2025-14939 is an SQL injection vulnerability stemming from improper handling of input in the deletemanager.php file.
Can CVE-2025-14939 be exploited remotely?
Yes, CVE-2025-14939 can be exploited remotely due to its nature of accepting input from external sources.