CNNVD-202508-1435 Information

CNNVD ID

CNNVD-202508-1435

CVE-2025-8921

  • CNNVD Published: 2025-08-13

Description (Chinese)

Code-Projects Job Diary是Code-Projects开源的一个工作日记软件。 Code-Projects Job Diary 1.0版本存在注入漏洞,该漏洞源于对文件/user-apply.php中参数job_title的错误操作导致SQL注入攻击。

Description (English)

Code-Projects Job Diary is a working diary software open to Code-Projects. There is an injection loophole in version 1.0 of Code-Projects Job Diary, which stems from an error in the performance of the argument Job title in the document/user-apply.php, which resulted in the SQL injection attack.

Hazard Level

Medium

Vulnerability Type

注入

Affected Vendor

Code-Projects

Published

2025-08-13

Last Modified

2026-02-24

References

https://code-projects.org/ https://github.com/caesar-power/CVE/issues/1 https://vuldb.com/?ctiid.319880 https://vuldb.com/?id.319880 https://vuldb.com/?submit.631294

Share on: