Code Projects · Exam Form Submission · CVE-2025-8327
**Name of the Vulnerable Software and Affected Versions**
code-projects Exam Form Submission version 1.0
**Description**
A critical vulnerability exists in an unknown functionality of the file `/admin/delete s8.php`. The manipulation of the `ID` argument leads to SQL injection. The attack can be launched remotely. The exploit has been disclosed to the public.
**Recommendations**
As a temporary workaround, consider restricting access to the `/admin/delete s8.php` file until a fix is available.
Sanitize the `ID` argument to prevent SQL injection attacks.