Description
A vulnerability, which was classified as critical, has been found in code-projects Crime Reporting System 1.0. Affected by this issue is some unknown functionality of the file /policelogin.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| code-projects | Crime Reporting System | 1.0 |
References
- https://code-projects.org/Product
- https://github.com/tangjihong1974/cve/issues/4Exploit, Issue Tracking, Third Party Advisory
- https://vuldb.com/?ctiid.315110Permissions Required
- https://vuldb.com/?id.315110Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.606606Third Party Advisory, VDB Entry
Timeline
- Published
- Jul 8, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed