CVE-2025-7157: code-projects Online Note Sharing login.php sql injection
A vulnerability was found in code-projects Online Note Sharing 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7157?
CVE-2025-7157 has been classified as critical due to the potential for remote SQL injection attacks.
How can I fix CVE-2025-7157?
To fix CVE-2025-7157, sanitize and validate user inputs in the /login.php file to prevent SQL injection.
What type of attack can be executed using CVE-2025-7157?
CVE-2025-7157 allows an attacker to execute remote SQL injection attacks through manipulated username and password parameters.
Which software is affected by CVE-2025-7157?
CVE-2025-7157 affects the code-projects Online Note Sharing version 1.0.
Is CVE-2025-7157 exploitable remotely?
Yes, CVE-2025-7157 can be exploited remotely, making it a critical vulnerability.