CVE-2025-7178mediumCWE-74CWE-89

CVE-2025-7178: falha de média gravidade em code-projects Food Distributor Site

code-projects Food Distributor Site login.php sql injection

Publicada em

Seguir esta CVE+ Monitorar Food Distributor Site

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.9epss 0.6%
A vulnerability classified as critical has been found in code-projects Food Distributor Site 1.0. This affects an unknown part of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
code-projects · Food Distributor Site
CVEs relacionadas — code-projects Food Distributor Site

No mesmo produto, das mais perigosas para as menos.

CVE-2025-6777MEDIUMcode-projects Food Distributor Site process_login.php sql injectionEPSS 0.6%CVE-2025-6778MEDIUMcode-projects Food Distributor Site save_settings.php cross site scriptingEPSS 0.4%