CVE-2025-15196mediumCWE-74CWE-89

CVE-2025-15196: medium-severity vulnerability in code-projects Assessment Management

code-projects Assessment Management login.php sql injection

Published · Updated

Follow this CVE+ Monitor Assessment Management

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9epss 0.4%
A vulnerability was identified in code-projects Assessment Management 1.0. This affects an unknown part of the file login.php. Such manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
code-projects · Assessment Management
Related CVEs — code-projects Assessment Management

In the same product, most dangerous first.

CVE-2026-14656MEDIUMcode-projects Assessment Management remove-user.php cross site scriptingEPSS 0.5%CVE-2026-76762MEDIUMcode-projects Assessment Management welcome.php sql injectionEPSS 0.4%CVE-2025-15195MEDIUMcode-projects Assessment Management add-module.php sql injectionEPSS 0.4%CVE-2026-93976MEDIUMcode-projects Assessment Management add-user.php cross site scriptingEPSS 0.4%CVE-2026-93975MEDIUMcode-projects Assessment Management User Editing edit-user.php cross site scriptingEPSS 0.4%CVE-2026-14655MEDIUMcode-projects Assessment Management view-users.php cross site scriptingEPSS 0.4%