CVE-2025-9028: code-projects Online Medicine Guide adphar.php sql injection
A flaw has been found in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /adphar.php. Executing manipulation of the argument phuname can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9028?
CVE-2025-9028 has been classified as a high severity SQL injection vulnerability.
How do I fix CVE-2025-9028?
To fix CVE-2025-9028, ensure proper parameterized queries and validation on user inputs in the /adphar.php file.
How can CVE-2025-9028 be exploited?
CVE-2025-9028 can be exploited remotely by manipulating the phuname parameter in file requests.
What software is affected by CVE-2025-9028?
CVE-2025-9028 affects the Code-projects Online Medicine Guide application.
What impact does CVE-2025-9028 have on security?
The impact of CVE-2025-9028 includes potential unauthorized access to the database through SQL injection attacks.