CVE-2025-0347
CVSS 3.1 Score 7.3 of 10 (high)
Details
Published Jan 9, 2025
CWE ID 74
CWE ID 89
Summary
CVE-2025-0347 is a newly disclosed critical vulnerability affecting the Admission Management System 1.0 developed by code-projects. The issue lies in the file index.php of the Login component, where manipulation of the u_id argument can lead to sql injection. This vulnerability is remotely exploitable, meaning an attacker can target the system from outside the network. The exploit for this vulnerability has been made public, increasing the risk of potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.