CVE-2025-15186: code-projects Refugee Food Management System addusers.php sql injection
A vulnerability has been found in code-projects Refugee Food Management System 1.0. Affected by this issue is some unknown functionality of the file /home/addusers.php. Such manipulation of the argument a leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15186?
CVE-2025-15186 is classified as a high severity vulnerability due to its potential for remote exploitation through SQL injection.
How do I fix CVE-2025-15186?
To fix CVE-2025-15186, ensure proper input validation and use prepared statements or parameterized queries in the /home/addusers.php file.
What types of systems are affected by CVE-2025-15186?
CVE-2025-15186 affects version 1.0 of the code-projects Refugee Food Management System.
Can CVE-2025-15186 be exploited remotely?
Yes, CVE-2025-15186 can be exploited remotely through SQL injection attacks.
What is the nature of the vulnerability in CVE-2025-15186?
CVE-2025-15186 involves a SQL injection vulnerability in the manipulation of user input parameters.