CVE-2025-7178mediumCWE-74CWE-89

CVE-2025-7178: medium-severity vulnerability in code-projects Food Distributor Site

code-projects Food Distributor Site login.php sql injection

Published

Follow this CVE+ Monitor Food Distributor Site

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9epss 0.6%
A vulnerability classified as critical has been found in code-projects Food Distributor Site 1.0. This affects an unknown part of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
code-projects · Food Distributor Site
Related CVEs — code-projects Food Distributor Site

In the same product, most dangerous first.

CVE-2025-6777MEDIUMcode-projects Food Distributor Site process_login.php sql injectionEPSS 0.6%CVE-2025-6778MEDIUMcode-projects Food Distributor Site save_settings.php cross site scriptingEPSS 0.4%