CVE-2025-5650: 1000projects Online Notice Board register.php sql injection
A vulnerability classified as critical was found in 1000projects Online Notice Board 1.0. This vulnerability affects unknown code of the file /register.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5650?
CVE-2025-5650 is classified as a critical vulnerability.
How does the CVE-2025-5650 vulnerability occur?
CVE-2025-5650 occurs due to SQL injection in the /register.php file affected by the manipulation of the fname parameter.
Who is affected by CVE-2025-5650?
CVE-2025-5650 affects users of the 1000projects Online Notice Board version 1.0.
Can CVE-2025-5650 be exploited remotely?
Yes, CVE-2025-5650 can be exploited remotely by an attacker.
How do I fix CVE-2025-5650?
To fix CVE-2025-5650, ensure to implement input validation and parameterized queries in the affected code.