CVE-2025-15196

CriticalCVSS 9.8/10Last modified Oct 7, 2026

Description

A vulnerability was identified in code-projects Assessment Management 1.0. This affects an unknown part of the file login.php. Such manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Dec 29, 2025
Last modified
Oct 7, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-151977.2A security flaw has been discovered in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. This vulnerability affects uCVE-2025-151989.8A weakness has been identified in code-projects College Notes Uploading System 1.0. This issue affects some unknown processing of the file /CVE-2025-151998.8A security vulnerability has been detected in code-projects College Notes Uploading System 1.0. Impacted is an unknown function of the file CVE-2025-15208.0PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers tCVE-2025-152004.8A vulnerability was detected in SohuTV CacheCloud up to 3.2.0. The affected element is the function getExceptionStatisticsByClient/getCommanCVE-2025-152015.4A flaw has been found in SohuTV CacheCloud up to 3.2.0. The impacted element is the function redirectNoPower of the file src/main/java/com/sCVE-2025-152024.8A vulnerability has been found in SohuTV CacheCloud up to 3.2.0. This affects the function taskQueueList of the file src/main/java/com/sohu/CVE-2025-152034.8A vulnerability was found in SohuTV CacheCloud up to 3.2.0. This impacts the function index of the file src/main/java/com/sohu/cache/web/conCVE-2025-152044.8A vulnerability was determined in SohuTV CacheCloud up to 3.2.0. Affected is the function doQuartzList of the file src/main/java/com/sohu/caCVE-2025-152058.8A vulnerability was identified in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionaliCVE-2025-152069.8A flaw has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /admin/add_area.php. ExecutiCVE-2025-152079.8A vulnerability has been found in Campcodes Supplier Management System 1.0. Affected is an unknown function of the file /admin/view_products