CVE-2025-60307: SQL Injection
Published Oct 10, 2025
·Updated
code-projects Computer Laboratory System 1.0 has a SQL injection vulnerability, where entering a universal password in the Password field on the login page can bypass login attempts.
Affected Software
2 affected components
Code-projects Computer Laboratory System
Carmelo Computer Laboratory System=1.0
Event History
Oct 10, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-60307?
CVE-2025-60307 is classified as a medium severity vulnerability due to its potential for unauthorized access.
2
How do I fix CVE-2025-60307?
To fix CVE-2025-60307, ensure input validation and parameterized queries are implemented to prevent SQL injection.
3
Who is affected by CVE-2025-60307?
CVE-2025-60307 affects users of the Code-projects Computer Laboratory System version 1.0.
4
What type of vulnerability is CVE-2025-60307?
CVE-2025-60307 is a SQL injection vulnerability that allows bypassing authentication.
5
How can CVE-2025-60307 be exploited?
CVE-2025-60307 can be exploited by entering a universal password in the Password field on the login page.