CVE-2025-29425: SQL Injection
Published Mar 17, 2025
·Updated
Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in examsave.php via the parameters member and first.
Affected Software
2 affected components
Code-projects Online Class and Exam Scheduling System
Fabian Online Class And Exam Scheduling System=1.0
Event History
Mar 17, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-29425?
CVE-2025-29425 is considered a high-severity vulnerability due to its potential for SQL Injection attacks.
2
How do I fix CVE-2025-29425?
To fix CVE-2025-29425, you should validate and sanitize user input in the exam_save.php file and use prepared statements for SQL queries.
3
What types of attacks can CVE-2025-29425 facilitate?
CVE-2025-29425 can facilitate SQL Injection attacks, allowing unauthorized users to manipulate the database.
4
Which parameters are exploited in CVE-2025-29425?
The parameters exploited in CVE-2025-29425 are 'member' and 'first' in the exam_save.php file.
5
Is CVE-2025-29425 specific to certain software versions?
Yes, CVE-2025-29425 specifically affects version 1.0 of the Code-projects Online Class and Exam Scheduling System.