CVE-2025-8438: code-projects Wazifa System postpublish.php sql injection

Published Aug 1, 2025

Updated

A vulnerability classified as critical was found in code-projects Wazifa System 1.0. This vulnerability affects unknown code of the file /controllers/postpublish.php. The manipulation of the argument post leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects Wazifa System

Anisha Wazifa System=1.0

Event History

Aug 1, 2025

CVE Published

via MITRE·06:32 AM

Data Sourced

via MITRE·06:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

DescriptionSeverityWeaknessAffected Software

Jun 18, 58473

Event

via NVD·04:38 PM

Frequently Asked Questions

What is the severity of CVE-2025-8438?

CVE-2025-8438 is classified as a critical vulnerability.

How does CVE-2025-8438 affect the Wazifa System?

CVE-2025-8438 affects the file /controllers/postpublish.php and allows for SQL injection through argument manipulation.

Can CVE-2025-8438 be exploited remotely?

Yes, the attack exploiting CVE-2025-8438 can be initiated remotely.

What are the potential impacts of CVE-2025-8438?

Exploitation of CVE-2025-8438 can lead to unauthorized access to the database and manipulation of data.

How do I fix CVE-2025-8438?

To fix CVE-2025-8438, you should sanitize and validate input parameters in the affected file to prevent SQL injection.