CVE-2025-8935: 1000 Projects Sales Management System custcmp.php sql injection
A vulnerability was found in 1000 Projects Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /superstore/custcmp.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8935?
The severity of CVE-2025-8935 is considered high due to its potential for remote SQL injection exploits.
How do I fix CVE-2025-8935?
To fix CVE-2025-8935, ensure that input sanitization is implemented on the Username parameter in the /superstore/custcmp.php file.
What type of attack is possible with CVE-2025-8935?
CVE-2025-8935 is vulnerable to SQL injection attacks that can be launched remotely.
Which software is affected by CVE-2025-8935?
CVE-2025-8935 affects the 1000 Projects Sales Management System version 1.0.
What is the exploitation impact of CVE-2025-8935?
Exploitation of CVE-2025-8935 can lead to unauthorized access to the database and retrieval of sensitive information.