CVE-2025-8497: code-projects Online Medicine Guide cusfindphar2.php sql injection
Published Aug 3, 2025
·Updated
A weakness has been identified in code-projects Online Medicine Guide 1.0. This affects an unknown part of the file /cusfindphar2.php. This manipulation of the argument Search causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.
Affected Software
2 affected components
Code-projects Online Medicine Guide
Anisha Online Medicine Guide=1.0
Event History
Aug 3, 2025
CVE Published
via MITRE·03:32 AM
Data Sourced
via MITRE·03:32 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Jun 22, 58473
Event
via NVD·09:25 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-8497?
CVE-2025-8497 is classified as a critical vulnerability.
2
What affected software versions are impacted by CVE-2025-8497?
CVE-2025-8497 affects Code-projects Online Medicine Guide version 1.0.
3
How does CVE-2025-8497 exploit SQL injection?
CVE-2025-8497 allows remote attackers to manipulate the 'Search' argument in /cusfindphar2.php, leading to SQL injection.
4
How do I fix CVE-2025-8497?
To fix CVE-2025-8497, validate and sanitize user inputs, and implement prepared statements for database queries.
5
Can CVE-2025-8497 be exploited remotely?
Yes, CVE-2025-8497 can be exploited remotely by attackers.