CVE-2025-8251: code-projects Exam Form Submission delete_s4.php sql injection
A vulnerability has been found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/deletes4.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8251?
CVE-2025-8251 is classified as a critical vulnerability affecting the Exam Form Submission software.
How do I fix CVE-2025-8251?
To fix CVE-2025-8251, developers should sanitize user inputs to prevent SQL injection in the /admin/delete_s4.php file.
What type of vulnerability is CVE-2025-8251?
CVE-2025-8251 is an SQL injection vulnerability that can be exploited through improper input handling.
Which software is affected by CVE-2025-8251?
CVE-2025-8251 affects the Code-projects Exam Form Submission version 1.0.
Can CVE-2025-8251 be exploited remotely?
Yes, CVE-2025-8251 can be exploited remotely if the attacker can manipulate the ID parameter in the appropriate request.