PT-2025-47874
CVE-2025-13579
·
Published
2025-11-24
·
Updated
2026-10-08
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Code-Projects Library System version 1.0
Description
A SQL injection issue exists due to the manipulation of the
ID argument. This can be exploited remotely through the /return.php file. The issue affects an unknown function. The exploit has been publicly released.Recommendations
As a temporary workaround, consider restricting or disabling access to the
/return.php file until a fix is available.
Avoid using the ID parameter in the affected file until the issue is resolved.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾