CVE-2025-8437: code-projects Kitchen Treasure userregistration.php sql injection
Published Aug 1, 2025
·Updated
A vulnerability classified as critical has been found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Code-projects Kitchen Treasure
Anisha Kitchen Treasure=1.0
Event History
Aug 1, 2025
CVE Published
via MITRE·06:02 AM
Data Sourced
via MITRE·06:02 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Jun 18, 58473
Event
via NVD·08:33 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-8437?
CVE-2025-8437 is classified as a critical vulnerability.
2
How does CVE-2025-8437 affect Kitchen Treasure?
CVE-2025-8437 allows for SQL injection through the userregistration.php file via the email argument.
3
Can CVE-2025-8437 be exploited remotely?
Yes, CVE-2025-8437 can be exploited remotely.
4
What are the potential impacts of exploiting CVE-2025-8437?
Exploiting CVE-2025-8437 can lead to unauthorized access to the database and manipulation of data.
5
How can I mitigate CVE-2025-8437?
To mitigate CVE-2025-8437, validate and sanitize all user inputs, especially the email argument in userregistration.php.