PT-2025-53810 · Unknown · Refugee Food Management System

Xu17 · Published 2025-12-29 · Updated 2025-12-31 · CVE-2025-15210

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Refugee Food Management System version 1.0

Description A security issue exists in Refugee Food Management System 1.0. The issue involves potential SQL injection due to manipulation of the argument a/b/c/sex/d/e/nationality nid within the file '/home/editrefugee.php'. This manipulation affects unknown code within the file. The attack can be launched remotely, and details of the exploit have been publicly disclosed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-15210

Affected Products

Refugee Food Management System

References · 11

• 🔥 https://github.com/YZS17/CVE/blob/main/Refugee%20Food_Management_System/sqli_editrefugee.php.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-15210 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-15210 · Security Note
• https://vuldb.com/?ctiid.338595 · Note
• https://twitter.com/VulmonFeeds/status/2005908266501460085 · Twitter Post
• https://vuldb.com/?id.338595 · Note
• https://twitter.com/CVEnew/status/2005788751839252532 · Twitter Post
• https://t.me/cveNotify/147412 · Telegram Post
• https://t.me/CVEtracker/40892 · Telegram Post
• https://vuldb.com/?submit.722804 · Note
• https://code-projects.org · Note