CVE-2025-8249: code-projects Exam Form Submission update_s3.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0. This issue affects some unknown processing of the file /admin/updates3.php. The manipulation of the argument credits leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8249?
CVE-2025-8249 is classified as a critical vulnerability.
How do I fix CVE-2025-8249?
To fix CVE-2025-8249, ensure to sanitize user inputs for the credits argument in /admin/update_s3.php to prevent SQL injection.
What type of attack can be initiated with CVE-2025-8249?
CVE-2025-8249 allows for SQL injection attacks that can be initiated remotely.
Which software is affected by CVE-2025-8249?
CVE-2025-8249 affects the Code-projects Exam Form Submission software version 1.0.
What file is involved in the CVE-2025-8249 vulnerability?
The file involved in the CVE-2025-8249 vulnerability is /admin/update_s3.php.