CVE-2025-15181: code-projects Refugee Food Management System pagenateRefugeesList.php sql injection
A security flaw has been discovered in code-projects Refugee Food Management System 1.0. The impacted element is an unknown function of the file /home/pagenateRefugeesList.php. Performing manipulation of the argument rfid results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15181?
CVE-2025-15181 has been rated as a high severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2025-15181?
To fix CVE-2025-15181, ensure proper input validation and using prepared statements to prevent SQL injection in the affected function.
What systems are affected by CVE-2025-15181?
CVE-2025-15181 affects version 1.0 of the Code-projects Refugee Food Management System.
Can CVE-2025-15181 be exploited remotely?
Yes, CVE-2025-15181 can be exploited remotely, allowing attackers to manipulate the rfid parameter.
What should I do if my system is vulnerable to CVE-2025-15181?
If your system is vulnerable to CVE-2025-15181, promptly apply security patches and implement input sanitation measures.