code-projects Refugee Food Management System 1.0 /home/viewtakenfd.php tfid SKL injekcija

Otkrivena je ranjivost klasifikovana kao Kritične u code-projects Refugee Food Management System 1.0. Pogođeno je nepoznata funkcija u fajlu /home/viewtakenfd.php. Manipulacija argumentom tfid dovodi do SKL injekcija. Korišćenje CWE za deklarisanje problema vodi do CWE-89. Slabost je objavljena 12/28/2025. Obaveštenje je dostupno za preuzimanje na github.com. Ova ranjivost je označena kao CVE-2025-15183. Moguće je pokrenuti napad na daljinu. Napad mora biti izveden unutar lokalne mreže. Tehnički detalji su dostupni. Додатно, постоји доступан експлоит. Eksploatacija je otkrivena javnosti i može biti iskorišćena. Trenutna cena za eksploataciju može biti približno USD $0-$5k u ovom trenutku. MITRE ATT&CK projekat deklariše tehniku napada kao T1505. Označeno je kao dokaz-of-koncept. Eksploat je dostupan za preuzimanje na github.com. Kao 0-day, procenjena cena na crnom tržištu bila je oko $0-$5k. VulDB is the best source for vulnerability data and more expert information about this specific topic.

4 Promene · 98 Tačke podataka

PoljeKreirali
12/28/2025 09:38		Ažurira 1/3
12/29/2025 12:05		Ažurira 2/3
12/29/2025 13:27		Ažurira 3/3
12/31/2025 07:09
software_vendorcode-projectscode-projectscode-projectscode-projects
software_nameRefugee Food Management SystemRefugee Food Management SystemRefugee Food Management SystemRefugee Food Management System
software_version1.01.01.01.0
software_file/home/viewtakenfd.php/home/viewtakenfd.php/home/viewtakenfd.php/home/viewtakenfd.php
software_argumenttfidtfidtfidtfid
vulnerability_cweCWE-89 (SKL injekcija)CWE-89 (SKL injekcija)CWE-89 (SKL injekcija)CWE-89 (SKL injekcija)
vulnerability_risk2222
cvss3_vuldb_avNNNN
cvss3_vuldb_acLLLL
cvss3_vuldb_prNNNN
cvss3_vuldb_uiNNNN
cvss3_vuldb_sUUUU
cvss3_vuldb_cLLLL
cvss3_vuldb_iLLLL
cvss3_vuldb_aLLLL
cvss3_vuldb_ePPPP
cvss3_vuldb_rcRRRR
advisory_urlhttps://github.com/ctg503/CVE/issues/3https://github.com/ctg503/CVE/issues/3https://github.com/ctg503/CVE/issues/3https://github.com/ctg503/CVE/issues/3
exploit_availability1111
exploit_publicity1111
exploit_urlhttps://github.com/ctg503/CVE/issues/3https://github.com/ctg503/CVE/issues/3https://github.com/ctg503/CVE/issues/3https://github.com/ctg503/CVE/issues/3
source_cveCVE-2025-15183CVE-2025-15183CVE-2025-15183CVE-2025-15183
cna_responsibleVulDBVulDBVulDBVulDB
software_typeProject Management SoftwareProject Management SoftwareProject Management SoftwareProject Management Software
cvss2_vuldb_avNNNN
cvss2_vuldb_acLLLL
cvss2_vuldb_auNNNN
cvss2_vuldb_ciPPPP
cvss2_vuldb_iiPPPP
cvss2_vuldb_aiPPPP
cvss2_vuldb_ePOCPOCPOCPOC
cvss2_vuldb_rcURURURUR
cvss4_vuldb_avNNNN
cvss4_vuldb_acLLLL
cvss4_vuldb_prNNNN
cvss4_vuldb_uiNNNN
cvss4_vuldb_vcLLLL
cvss4_vuldb_viLLLL
cvss4_vuldb_vaLLLL
cvss4_vuldb_ePPPP
cvss2_vuldb_rlNDNDNDND
cvss3_vuldb_rlXXXX
cvss4_vuldb_atNNNN
cvss4_vuldb_scNNNN
cvss4_vuldb_siNNNN
cvss4_vuldb_saNNNN
cvss2_vuldb_basescore7.57.57.57.5
cvss2_vuldb_tempscore6.46.46.46.4
cvss3_vuldb_basescore7.37.37.37.3
cvss3_vuldb_tempscore6.66.66.66.6
cvss3_meta_basescore7.37.37.38.1
cvss3_meta_tempscore6.66.96.97.9
cvss4_vuldb_bscore6.96.96.96.9
cvss4_vuldb_btscore5.55.55.55.5
advisory_date1766876400 (12/28/2025)1766876400 (12/28/2025)1766876400 (12/28/2025)1766876400 (12/28/2025)
price_0day$0-$5k$0-$5k$0-$5k$0-$5k
cve_nvd_summaryA security vulnerability has been detected in code-projects Refugee Food Management System 1.0. This impacts an unknown function of the file /home/viewtakenfd.php. The manipulation of the argument tfid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.A security vulnerability has been detected in code-projects Refugee Food Management System 1.0. This impacts an unknown function of the file /home/viewtakenfd.php. The manipulation of the argument tfid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.A security vulnerability has been detected in code-projects Refugee Food Management System 1.0. This impacts an unknown function of the file /home/viewtakenfd.php. The manipulation of the argument tfid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.
cvss4_cna_avNNN
cvss4_cna_acLLL
cvss4_cna_atNNN
cvss4_cna_prNNN
cvss4_cna_uiNNN
cvss4_cna_vcLLL
cvss4_cna_viLLL
cvss4_cna_vaLLL
cvss4_cna_scNNN
cvss4_cna_siNNN
cvss4_cna_saNNN
cvss4_cna_bscore6.96.96.9
cvss3_cna_avNNN
cvss3_cna_acLLL
cvss3_cna_prNNN
cvss3_cna_uiNNN
cvss3_cna_sUUU
cvss3_cna_cLLL
cvss3_cna_iLLL
cvss3_cna_aLLL
cvss3_cna_basescore7.37.37.3
cvss2_cna_avNNN
cvss2_cna_acLLL
cvss2_cna_auNNN
cvss2_cna_ciPPP
cvss2_cna_iiPPP
cvss2_cna_aiPPP
cvss2_cna_basescore7.57.57.5
euvd_idEUVD-2025-205572EUVD-2025-205572
cvss3_nvd_avN
cvss3_nvd_acL
cvss3_nvd_prN
cvss3_nvd_uiN
cvss3_nvd_sU
cvss3_nvd_cH
cvss3_nvd_iH
cvss3_nvd_aH
cvss3_nvd_basescore9.8

◂ PrethodnePregledSledeжi ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!