CVE-2025-29425

Summary

CVE-2025-29425 is a newly disclosed vulnerability affecting the Code-projects Online Class and Exam Scheduling System version 1.0. Hackers can exploit SQL Injection vulnerabilities in the exam_save.php file by manipulating the member and first parameters. Successful attacks may allow unauthorized access to sensitive data, modification of records, or even system takeover. Users should immediately apply security patches or upgrades to mitigate the risk. The vulnerability underscores the importance of input validation and sanitization to protect against SQL Injection attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.