CVE-2025-10102 code-projects Online Event Judging System index.php sql injection
MediumCVSS 6.9
EPSS 0.52%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown function of the file /index.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| code-projects Online Event Judging System | = 1.0 | No fix listed |
| carmelo online event judging system | = 1.0 | No fix listed |
References
- VDB-323068 | code-projects Online Event Judging System index.php sql injection technical-description third-party-advisory vdb-entry
- VDB-323068 | CTI Indicators (IOB, IOC, TTP, IOA) permissions-required signature vdb-entry
- Submit #645297 | code-projects Online Event Judging System V1.0 SQL Injection third-party-advisory vdb-entry
- github.com exploit issue-tracking third-party-advisory
- code-projects.org product