CVE-2025-15195: code-projects Assessment Management add-module.php sql injection
A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file /admin/add-module.php. This manipulation of the argument linked[] causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15195?
CVE-2025-15195 is classified as a critical severity SQL injection vulnerability.
How do I fix CVE-2025-15195?
To fix CVE-2025-15195, you should sanitize and validate input for the linked[] parameter in the /admin/add-module.php file.
Can CVE-2025-15195 be exploited remotely?
Yes, CVE-2025-15195 can be exploited remotely, allowing attackers to manipulate the database.
What products are affected by CVE-2025-15195?
CVE-2025-15195 affects version 1.0 of code-projects Assessment Management.
What type of vulnerability is CVE-2025-15195?
CVE-2025-15195 is a SQL injection vulnerability that can lead to unauthorized database access.