PT-2025-23885 · Unknown · Code-Projects/Anirbandutta9 Content Management System+1
Xu17
·
Published
2025-06-05
·
Updated
2025-06-05
·
CVE-2025-5631
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
code-projects/anirbandutta9 Content Management System and News-Buzz version 1.0
Description
A critical issue was found in the Content Management System and News-Buzz. The problem affects an unknown function of the file /publicposts.php. Manipulation of the
post argument leads to SQL injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.Recommendations
As a temporary workaround, consider disabling the unknown function of the file /publicposts.php until a patch is available.
Restrict access to the /publicposts.php file to minimize the risk of exploitation.
Avoid using the
post argument in the affected file until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Special Elements Injection
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Code-Projects/Anirbandutta9 Content Management System
Code-Projects/Anirbandutta9 News-Buzz