CNNVD-202507-2850 Information

CNNVD ID

CNNVD-202507-2850

CVE-2025-7950

  • CNNVD Published: 2025-07-22

Description (Chinese)

Code-Projects Public Chat Room是Code-Projects开源的一个公共聊天室软件。 Code-Projects Public Chat Room 1.0版本存在注入漏洞,该漏洞源于对文件/login.php中参数Username的错误操作导致SQL注入攻击。

Description (English)

Code-Projects Public Chat Room is a public chat room software open to Code-Projects. There is an injection loophole in version 1.0 of Code-Project Public Chat Room, which results from an error of action on the parameter Username in the document/login.php that resulted in the SQL injection attack.

Hazard Level

Medium

Vulnerability Type

注入

Affected Vendor

Code-Projects

Published

2025-07-22

Last Modified

2026-02-24

References

https://github.com/BalanceLee/CVE/issues/5 https://vuldb.com/?submit.619313 https://code-projects.org/ https://vuldb.com/?id.317096 https://vuldb.com/?ctiid.317096 https://access.redhat.com/security/cve/cve-2025-7950 https://nvd.nist.gov/vuln/detail/CVE-2025-7950

Share on: