PT-2025-43914 · Code Projects · Code-Projects Online Event Judging System

Seeu1 · Published 2025-10-27 · Updated 2025-10-27 · CVE-2025-12255

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions code-projects Online Event Judging System version 1.0

Description A security flaw exists in code-projects Online Event Judging System 1.0. Manipulation of the fullname argument in the /add contestant.php file can lead to SQL injection. Remote exploitation is possible, and an exploit has been publicly released.

Recommendations Apply input validation and sanitization to the fullname parameter in the /add contestant.php file.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-12255

Affected Products

Code-Projects Online Event Judging System

References · 10

• 🔥 https://github.com/zzonce/cve/issues/3 · Exploit
• https://osv.dev/vulnerability/CVE-2025-12255 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-12255 · Security Note
• https://twitter.com/VulmonFeeds/status/1982831630122099144 · Twitter Post
• https://t.me/CVEtracker/35816 · Telegram Post
• https://vuldb.com/?ctiid.329926 · Note
• https://vuldb.com/?id.329926 · Note
• https://t.me/cveNotify/140423 · Telegram Post
• https://vuldb.com/?submit.674006 · Note
• https://code-projects.org · Note