CVE-2025-8164: code-projects Public Chat Room send_message.php sql injection
A vulnerability has been found in code-projects Public Chat Room 1.0 and classified as critical. This vulnerability affects unknown code of the file sendmessage.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8164?
CVE-2025-8164 is classified as critical due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-8164?
To fix CVE-2025-8164, validate and sanitize all user inputs in the send_message.php file to prevent SQL injection.
What systems are affected by CVE-2025-8164?
CVE-2025-8164 affects the Code-projects Public Chat Room version 1.0.
Can CVE-2025-8164 be exploited remotely?
Yes, CVE-2025-8164 can be exploited remotely, allowing attackers to execute SQL injection attacks.
What is the main cause of the vulnerability CVE-2025-8164?
The main cause of CVE-2025-8164 is improper handling of the ID argument in the send_message.php file.