CNNVD-202506-2884 Information

CNNVD ID

CNNVD-202506-2884

CVE-2025-6446

  • CNNVD Published: 2025-06-21

Description (Chinese)

Code-Projects Client Details System是Code-Projects开源的一个客户信息系统。 Code-Projects Client Details System 1.0版本存在注入漏洞,该漏洞源于文件/clientdetails/admin/index.php中参数Username的错误操作导致SQL注入。

Description (English)

Code-Projects Clinic Details Systems is a client information system open to Code-Projects. There is an injection loophole in version 1.0 of Code-Projects Clinic Details System, which originates from the error of Username, the parameter in the file/clientdetails/admin/index.php, which resulted in the SQL injection.

Hazard Level

Medium

Vulnerability Type

注入

Affected Vendor

Code-Projects

Published

2025-06-21

Last Modified

2026-02-24

References

https://code-projects.org/ https://github.com/kakalalaww/CVE/issues/18 https://vuldb.com/?ctiid.313553 https://vuldb.com/?id.313553 https://vuldb.com/?submit.598499 https://access.redhat.com/security/cve/cve-2025-6446

Share on: