PT-2025-31489 · Code Projects · Exam Form Submission

Zhuchengqing · Published 2025-07-31 · Updated 2025-08-05 · CVE-2025-8372

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions code-projects Exam Form Submission version 1.0

Description A critical issue exists in code-projects Exam Form Submission 1.0. The vulnerability is due to a SQL injection flaw within an unknown functionality of the file /admin/update s7.php. Manipulation of the credits argument can lead to successful exploitation. The exploit for this issue has been publicly disclosed.

Recommendations As a temporary workaround, consider restricting access to the /admin/update s7.php file to minimize the risk of exploitation. Avoid using the credits parameter in the affected file until the issue is resolved.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-8372

Affected Products

Exam Form Submission

References · 10

• 🔥 https://github.com/mynlxx/CVE-ZhuChengQing/issues/2 · Exploit
• https://osv.dev/vulnerability/CVE-2025-8372 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8372 · Security Note
• https://vuldb.com/?submit.622556 · Note
• https://vuldb.com/?ctiid.318344 · Note
• https://t.me/CVEtracker/28838 · Telegram Post
• https://twitter.com/cracbot/status/1952686064381972877 · Twitter Post
• https://vuldb.com/?id.318344 · Note
• https://twitter.com/CVEnew/status/1950825109284855855 · Twitter Post
• https://code-projects.org · Note