SQL Injection Vulnerability in Code-Projects Vehicle Management 1.0
CVE-2025-8329

9.8CRITICAL

Key Information:

Vendor

Code-Projects

Status
Vehicle Management
Vendor
CVE Published:
30 July 2025

What is CVE-2025-8329?

A vulnerability has been identified in Code-Projects' Vehicle Management version 1.0, specifically within the file /filter3.php. This issue allows for SQL injection through manipulation of the 'company' argument, potentially enabling an attacker to execute unauthorized SQL commands. The vulnerability can be exploited remotely, posing a significant risk to users of the software. Additionally, other parameters may also be susceptible to similar injections, further widening the scope of the potential attack.

References

https://code-projects.org/
https://github.com/zgqsdx/cve/issues/2
https://vuldb.com/?ctiid.318279

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2025-8329 : SQL Injection Vulnerability in Code-Projects Vehicle Management 1.0