CVE-2025-7859: code-projects Church Donation System update_password_admin.php sql injection
A vulnerability classified as critical was found in code-projects Church Donation System 1.0. This vulnerability affects unknown code of the file /members/updatepasswordadmin.php. The manipulation of the argument newpassword leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7859?
CVE-2025-7859 is classified as a critical vulnerability.
How does CVE-2025-7859 affect the Church Donation System?
CVE-2025-7859 allows for SQL injection through the manipulation of the new_password argument in the /members/update_password_admin.php file.
What is the impact of exploiting CVE-2025-7859?
Exploiting CVE-2025-7859 can potentially allow an attacker to execute arbitrary SQL code on the database.
How do I fix CVE-2025-7859?
To fix CVE-2025-7859, developers should implement parameterized queries or prepared statements to prevent SQL injection.
Are there any known exploits for CVE-2025-7859?
Yes, multiple public exploits for CVE-2025-7859 have been reported, allowing remote attackers to perform SQL injection.