CVE-2025-10103

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A weakness has been identified in code-projects Online Event Judging System 1.0. This impacts an unknown function of the file /home.php. Executing manipulation of the argument main_event can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be exploited.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Sep 8, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-101049.8A security vulnerability has been detected in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /reCVE-2025-101058.8A flaw has been found in yanyutao0402 ChanCMS up to 3.3.1. Affected by this issue is some unknown functionality of the file /cms/article/seaCVE-2025-101068.8A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.1. This affects an unknown part of the file /cms/collect/search. Such manipCVE-2025-101074.7A vulnerability has been found in TRENDnet TEW-831DR 1.0 (601.130.1.1410). Impacted is an unknown function of the file /boafrm/formSysCmd. TCVE-2025-101089.8A vulnerability was found in Campcodes Online Loan Management System 1.0. This vulnerability affects unknown code of the file /ajax.php?actiCVE-2025-101099.8A vulnerability was determined in Campcodes Online Loan Management System 1.0. This issue affects some unknown processing of the file /ajax.CVE-2025-10118.8A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code CVE-2025-101108.8A vulnerability was identified in ChanCMS up to 3.3.1. Impacted is an unknown function of the file /search/. The manipulation with the inputCVE-2025-101119.8A security flaw has been discovered in itsourcecode Student Information Management System 1.0. The affected element is an unknown function oCVE-2025-101129.8A weakness has been identified in itsourcecode Student Information Management System 1.0. The impacted element is an unknown function of theCVE-2025-101139.8A security vulnerability has been detected in itsourcecode Student Information Management System 1.0. This affects an unknown function of thCVE-2025-101149.8A vulnerability was found in PHPGurukul Small CRM 4.0. Affected by this issue is some unknown functionality of the file /profile.php. The ma
CVE-2025-10103: Critical severity, CVSS 9.8 | Vulnix