CNNVD-202512-5458 Information

CNNVD ID

CNNVD-202512-5458

CVE-2025-15243

  • CNNVD Published: 2025-12-30

Description (Chinese)

Code-Projects Simple Stock System是Code-Projects开源的一个简单股票系统。 Code-Projects Simple Stock System 1.0版本存在SQL注入漏洞,该漏洞源于对文件/market/login.php中参数Username的错误操作,可能导致SQL注入。

Description (English)

Code-Projects Simple Stock Systems is a simple stock system open to Code-Projects. The Code-Projects Simple Stock System Version 1.0 contains an injection loophole in SQL, which results from an error in Username, the parameter in the document/market/login.php, and may result in SQL injection.

Hazard Level

Medium

Vulnerability Type

SQL注入

Affected Vendor

Code-Projects

Published

2025-12-30

Last Modified

2026-02-24

References

https://github.com/c13641462064-lgtm/sql_injection/issues/1 https://code-projects.org/ https://vuldb.com/?ctiid.338633 https://vuldb.com/?submit.725689 https://vuldb.com/?id.338633

Share on: