CVE-2025-15196: falha de média gravidade em code-projects Assessment Management
code-projects Assessment Management login.php sql injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.4%
A vulnerability was identified in code-projects Assessment Management 1.0. This affects an unknown part of the file login.php. Such manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
code-projects · Assessment ManagementCVEs relacionadas — code-projects Assessment Management
No mesmo produto, das mais perigosas para as menos.
CVE-2026-14656MEDIUMcode-projects Assessment Management remove-user.php cross site scriptingEPSS 0.5%CVE-2026-76762MEDIUMcode-projects Assessment Management welcome.php sql injectionEPSS 0.4%CVE-2025-15195MEDIUMcode-projects Assessment Management add-module.php sql injectionEPSS 0.4%CVE-2026-93976MEDIUMcode-projects Assessment Management add-user.php cross site scriptingEPSS 0.4%CVE-2026-93975MEDIUMcode-projects Assessment Management User Editing edit-user.php cross site scriptingEPSS 0.4%CVE-2026-14655MEDIUMcode-projects Assessment Management view-users.php cross site scriptingEPSS 0.4%