CVE-2025-7178: code-projects Food Distributor Site login.php sql injection

Published Jul 8, 2025

Updated

A vulnerability classified as critical has been found in code-projects Food Distributor Site 1.0. This affects an unknown part of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects Food Distributor Site

Fabian Food Distributor Site=1.0

Event History

Jul 8, 2025

CVE Published

via MITRE·12:32 PM

Data Sourced

via MITRE·12:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 PM

DescriptionSeverityWeaknessAffected Software

Jun 14, 58473

Event

via NVD·07:19 PM

Frequently Asked Questions

What is the severity of CVE-2025-7178?

CVE-2025-7178 is classified as critical due to its potential for remote SQL injection.

How do I fix CVE-2025-7178?

To fix CVE-2025-7178, sanitize and validate user inputs for the Username argument in the /admin/login.php file.

What type of vulnerability is CVE-2025-7178?

CVE-2025-7178 is an SQL injection vulnerability that allows remote attackers to manipulate database queries.

Which software is affected by CVE-2025-7178?

CVE-2025-7178 affects Code-projects Food Distributor Site version 1.0.

Can CVE-2025-7178 be exploited remotely?

Yes, CVE-2025-7178 can be exploited remotely, making it particularly dangerous for exposed servers.