CVE-2025-0336

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/forms/teacher.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Jan 9, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-03376.5ServiceNow has addressed an authorization bypass vulnerability that was identified in the Washington release of the Now Platform. This vulneCVE-2025-03396.1A vulnerability classified as problematic has been found in code-projects Online Bike Rental 1.0. Affected is an unknown function of the filCVE-2025-03409.8A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this vulnerability is an uCVE-2025-03419.8A vulnerability, which was classified as critical, has been found in CampCodes Computer Laboratory Management System 1.0. Affected by this iCVE-2025-03425.4A vulnerability, which was classified as problematic, was found in CampCodes Computer Laboratory Management System 1.0. This affects an unknCVE-2025-03437.5Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itseCVE-2025-03448.8A vulnerability has been found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this vulnerability is the function listData ofCVE-2025-03458.8A vulnerability was found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this issue is the function listData of the file /syCVE-2025-03467.2A vulnerability was found in code-projects Content Management System 1.0. It has been classified as critical. This affects an unknown part oCVE-2025-03479.8A vulnerability was found in code-projects Admission Management System 1.0. It has been declared as critical. This vulnerability affects unkCVE-2025-03485.4A vulnerability was found in CampCodes DepEd Equipment Inventory System 1.0. It has been rated as problematic. This issue affects some unknoCVE-2025-03499.8A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /g
CVE-2025-0336: Critical severity, CVSS 9.8 | Vulnix