PT-2025-43929 · Code Projects · Online Event Judging System

Zhonglouguairen

·

CVE-2025-12262

·

Published

2025-10-27

·

Updated

2025-10-27

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions code-projects Online Event Judging System version 1.0
Description A flaw exists in code-projects Online Event Judging System 1.0 that allows for SQL injection. The issue is located in the /edit criteria.php file, specifically through manipulation of the crit id argument. This can be exploited remotely. The details of the exploit have been publicly disclosed.
Recommendations Apply any available updates or patches for code-projects Online Event Judging System version 1.0. As a temporary workaround, restrict access to the /edit criteria.php file. Sanitize the crit id input to prevent SQL injection attacks.

Exploit

Fix

Special Elements Injection

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-74CWE-89

Related Identifiers

CVE-2025-12262

Affected Products

Online Event Judging System