CVE-2025-8372: code-projects Exam Form Submission update_s7.php sql injection
A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/updates7.php. The manipulation of the argument credits leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8372?
CVE-2025-8372 is classified as a critical vulnerability.
How do I fix CVE-2025-8372?
To fix CVE-2025-8372, you should patch the affected code in the /admin/update_s7.php file to prevent SQL injection.
What is the impact of CVE-2025-8372?
The impact of CVE-2025-8372 includes potential remote code execution through SQL injection.
Which software is affected by CVE-2025-8372?
CVE-2025-8372 affects Code-projects Exam Form Submission version 1.0.
Can CVE-2025-8372 be exploited remotely?
Yes, CVE-2025-8372 can be exploited remotely by manipulating the credits argument.