CVE-2025-5205: 1000 Projects Daily College Class Work Report Book dcwr_entry.php sql injection
Published May 26, 2025
·Updated
A vulnerability classified as critical has been found in 1000 Projects Daily College Class Work Report Book 1.0. Affected is an unknown function of the file /dcwrentry.php. The manipulation of the argument Date leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
1000 Projects Daily College Class Work Report Book
1000projects Daily College Class Work Report Book=1.0
Event History
May 26, 2025
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeakness
Oct 31, 57386
Event
via FIRST·02:19 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-5205?
CVE-2025-5205 is classified as a critical vulnerability.
2
How does CVE-2025-5205 exploit the system?
CVE-2025-5205 allows for SQL injection through manipulation of the Date argument in the /dcwr_entry.php file.
3
Can CVE-2025-5205 be exploited remotely?
Yes, CVE-2025-5205 can be exploited remotely.
4
What software is affected by CVE-2025-5205?
CVE-2025-5205 affects the 1000 Projects Daily College Class Work Report Book version 1.0.
5
How can I mitigate CVE-2025-5205?
To mitigate CVE-2025-5205, validate and sanitize all user inputs, particularly in the Date argument.