CVE-2025-8374: code-projects Vehicle Management addcompany.php sql injection
A vulnerability was found in code-projects Vehicle Management 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /addcompany.php. The manipulation of the argument company leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8374?
CVE-2025-8374 has been declared a critical severity vulnerability.
How does CVE-2025-8374 affect the Vehicle Management software?
CVE-2025-8374 allows for SQL injection through the manipulation of the 'company' parameter in the /addcompany.php file.
Can the CVE-2025-8374 vulnerability be exploited remotely?
Yes, CVE-2025-8374 can be exploited remotely.
What action should be taken to mitigate CVE-2025-8374?
To mitigate CVE-2025-8374, it is essential to sanitize user inputs and implement prepared statements for database interactions.
Which version of Vehicle Management is affected by CVE-2025-8374?
CVE-2025-8374 affects all versions of Code-projects Vehicle Management 1.0.