CVE-2025-8240: code-projects Exam Form Submission dashboard.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. Affected by this issue is some unknown functionality of the file /user/dashboard.php. The manipulation of the argument phone leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8240?
CVE-2025-8240 is classified as a critical vulnerability.
How does CVE-2025-8240 affect the Exam Form Submission application?
CVE-2025-8240 affects the file /user/dashboard.php, allowing SQL injection through the manipulation of the phone argument.
What types of attacks can be executed due to CVE-2025-8240?
CVE-2025-8240 can be exploited to launch SQL injection attacks that may compromise the application's database.
How do I fix CVE-2025-8240 in the Exam Form Submission application?
To fix CVE-2025-8240, sanitize and validate all user inputs, especially the phone argument in /user/dashboard.php.
Is there a current patch available for CVE-2025-8240?
As of now, there is no specific patch announced for CVE-2025-8240; users should implement the recommended mitigation techniques.