CVE-2025-6470: code-projects Online Bidding System bidlog.php sql injection
A vulnerability classified as critical has been found in code-projects Online Bidding System 1.0. Affected is an unknown function of the file /bidlog.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6470?
CVE-2025-6470 is classified as a critical vulnerability.
How does CVE-2025-6470 affect the Online Bidding System?
CVE-2025-6470 allows for SQL injection through the manipulation of the argument ID in the /bidlog.php file.
Can CVE-2025-6470 be exploited remotely?
Yes, CVE-2025-6470 can be exploited remotely, allowing attackers to launch SQL injection attacks.
What versions of the Online Bidding System are affected by CVE-2025-6470?
CVE-2025-6470 affects all versions of the Code-projects Online Bidding System 1.0.
How can I fix CVE-2025-6470?
To remediate CVE-2025-6470, input validation should be implemented to sanitize the user input in the affected SQL queries.