CVE-2025-0336
CVSS 2.0 Score 6.5 of 10 (medium)
Details
Published Jan 9, 2025
Updated: Mar 3, 2025
CWE ID 74
CWE ID 89
Summary
CVE-2025-0336 is a critical vulnerability identified in the Codezips Project Management System 1.0. A flaw in the file /pages/forms/teacher.php allows for sql injection through the manipulation of an argument name. This vulnerability can be exploited remotely, making it a significant security risk. The exploit for this issue has been made public, increasing the potential for malicious actors to take advantage of it.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Project Management System
Affected Vendors
- Codezips