CVE-2025-12256: falha de média gravidade em code-projects Online Event Judging System
code-projects Online Event Judging System edit_contestant.php sql injection
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.4%
A weakness has been identified in code-projects Online Event Judging System 1.0. This vulnerability affects unknown code of the file /edit_contestant.php. Executing manipulation of the argument contestant_id can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
code-projects · Online Event Judging SystemCVEs relacionadas — code-projects Online Event Judging System
No mesmo produto, das mais perigosas para as menos.
CVE-2025-10104MEDIUMcode-projects Online Event Judging System review_search.php sql injectionEPSS 0.5%CVE-2025-10103MEDIUMcode-projects Online Event Judging System home.php sql injectionEPSS 0.5%CVE-2025-10102MEDIUMcode-projects Online Event Judging System index.php sql injectionEPSS 0.5%CVE-2025-9610MEDIUMcode-projects Online Event Judging System create_account.php sql injectionEPSS 0.4%CVE-2025-12263MEDIUMcode-projects Online Event Judging System edit_judge.php sql injectionEPSS 0.3%CVE-2025-12262MEDIUMcode-projects Online Event Judging System edit_criteria.php sql injectionEPSS 0.3%