Newbie666

**Name of the Vulnerable Software and Affected Versions** code-projects Client Details System version 1.0 **Description** A flaw exists in code-projects Client Details System version 1.0 that allows for remote code execution. The issue is located in the file `/admin/update-profile.php` and involves manipulation of the `uid` argument, leading to a SQL injection. The exploit is publicly available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.