CVE-2025-8166: medium-severity vulnerability in code-projects Church Donation System
code-projects Church Donation System HTTP POST Request index.php sql injection
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 0.6%
A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/index.php of the component HTTP POST Request Handler. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
code-projects · Church Donation SystemRelated CVEs — code-projects Church Donation System
In the same product, most dangerous first.
CVE-2025-7930MEDIUMcode-projects Church Donation System add_members.php sql injectionEPSS 0.6%CVE-2025-7929MEDIUMcode-projects Church Donation System edit_Members.php sql injectionEPSS 0.6%CVE-2025-7928MEDIUMcode-projects Church Donation System edit_user.php sql injectionEPSS 0.6%CVE-2025-7931MEDIUMcode-projects Church Donation System admin_pic.php unrestricted uploadEPSS 0.6%CVE-2025-7861MEDIUMcode-projects Church Donation System search.php sql injectionEPSS 0.5%CVE-2025-7860MEDIUMcode-projects Church Donation System login_admin.php sql injectionEPSS 0.5%