CVE-2025-7171: code-projects Crime Reporting System policelogin.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Crime Reporting System 1.0. Affected by this issue is some unknown functionality of the file /policelogin.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7171?
CVE-2025-7171 is classified as a critical vulnerability.
What kind of attack can be executed using CVE-2025-7171?
CVE-2025-7171 allows for SQL injection attacks through manipulation of the email argument in /policelogin.php.
How do I fix CVE-2025-7171?
To fix CVE-2025-7171, you should implement proper input validation and parameterized queries to prevent SQL injection.
Which software is affected by CVE-2025-7171?
CVE-2025-7171 affects the code-projects Crime Reporting System 1.0.
What is the vulnerable component in CVE-2025-7171?
The vulnerable component in CVE-2025-7171 is the file /policelogin.php.