CVE-2025-15208: code-projects Refugee Food Management System editrefugee.php sql injection
A security flaw has been discovered in code-projects Refugee Food Management System 1.0. Affected by this issue is some unknown functionality of the file /home/editrefugee.php. The manipulation of the argument rfid results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15208?
CVE-2025-15208 has been classified as a critical vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-15208?
To mitigate CVE-2025-15208, it is recommended to sanitize all input data and use prepared statements to prevent SQL injection in the affected file.
What components are affected by CVE-2025-15208?
CVE-2025-15208 specifically affects the Refugee Food Management System version 1.0, particularly the functionality within /home/editrefugee.php.
Can CVE-2025-15208 be exploited remotely?
Yes, CVE-2025-15208 can be exploited remotely by manipulating the 'rfid' argument in requests sent to the affected file.
What type of vulnerability is CVE-2025-15208?
CVE-2025-15208 is classified as an SQL injection vulnerability, allowing attackers to execute arbitrary SQL queries.