CVE-2025-9610
code-projects Online Event Judging System create_account.php sql injection
- State
- Published
- Severity
- 6.9 Medium
- Published
- Aug 29, 2025
- Updated
- Aug 29, 2025
- Reserved
- Aug 28, 2025
Description
A vulnerability was determined in code-projects Online Event Judging System 1.0. This issue affects some unknown processing of the file /create_account.php. This manipulation of the argument fname causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Other parameters might be affected as well.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 7.3 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 3.0 | 7.3 High | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 2.0 | 7.5 High | AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Online Event Judging Systemcode-projects |
|
References
- VDB-321788 | code-projects Online Event Judging System create_account.php sql injectionvdb-entrytechnical-description
- VDB-321788 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #636622 | code-projects Online Event Judging System V1.0 SQL Injectionthird-party-advisory
- https://github.com/yihaofuweng/cve/issues/15exploitissue-tracking
- https://code-projects.org/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.