PT-2025-53710 · Unknown · Refugee Food Management System

Chenxiaodong · Published 2025-12-29 · Updated 2025-12-30 · CVE-2025-15183

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Refugee Food Management System version 1.0

Description A security issue exists in code-projects Refugee Food Management System 1.0. The manipulation of the tfid argument in the file '/home/viewtakenfd.php' leads to a SQL injection. The attack can be carried out remotely. The exploit has been disclosed publicly. The vulnerability impacts an unknown function within the specified file.

Recommendations Refugee Food Management System version 1.0: Avoid using the tfid parameter in the '/home/viewtakenfd.php' file until the issue is resolved. As a temporary workaround, consider restricting access to the '/home/viewtakenfd.php' file to minimize the risk of exploitation.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-15183

Affected Products

Refugee Food Management System

References · 14

• 🔥 https://github.com/ctg503/CVE/issues/3 · Exploit
• https://osv.dev/vulnerability/CVE-2025-15183 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-15183 · Security Note
• https://t.me/CVEtracker/40829 · Telegram Post
• https://t.me/cveNotify/147229 · Telegram Post
• https://vuldb.com/?submit.721273 · Note
• https://twitter.com/CVEnew/status/2005584518351085744 · Twitter Post
• https://vuldb.com/?submit.722808 · Note
• https://t.me/cveNotify/147033 · Telegram Post
• https://vuldb.com/?id.338568 · Note
• https://vuldb.com/?ctiid.338568 · Note
• https://vuldb.com/?submit.722809 · Note
• https://vuldb.com/?submit.722810 · Note
• https://code-projects.org · Note