CVE-2025-70152Critical· 9.8▾ AbyssalPoC availablecode-projects Community Project Scholars Tracking System 1.0 is vulnerable to SQL Injection in the admin user management endpoints /admin/save_user.php and /admin/update_user.php. These endpoints lack authentication checks and directly c…
▾ Abyssal zone — Critical with a public exploit or in-the-wild use
impact 53.9 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
0.4% → 0.5%
code-projects Community Project Scholars Tracking System 1.0 is vulnerable to SQL Injection in the admin user management endpoints /admin/save_user.php and /admin/update_user.php. These endpoints lack authentication checks and directly concatenate user-supplied POST parameters (firstname, lastname, username, password, user_id) into SQL queries without validation or parameterization.
scholars_tracking_system = 1.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-70151High· 8.8code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload
CVE-2025-11613Medium· 6.3A vulnerability was found in code-projects Simple Food Ordering System 1.0
CVE-2025-11612Medium· 6.3A vulnerability has been found in code-projects Simple Food Ordering System 1.0
CVE-2025-11608High· 7.3A security vulnerability has been detected in code-projects E-Banking System 1.0
CVE-2025-11605Medium· 6.3A vulnerability was identified in code-projects Client Details System 1.0
CVE-2025-11603Medium· 6.3A vulnerability was found in code-projects Simple Food Ordering System 1.0