Description
A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an unknown function of the file /register.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| code-projects | Online Farm System | 1.0 |
References
- https://code-projects.org/Product
- https://github.com/wllovemy/cve/issues/9Exploit, Issue Tracking, Third Party Advisory
- https://vuldb.com/?ctiid.318282Permissions Required, VDB Entry
- https://vuldb.com/?id.318282Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.624003Third Party Advisory, VDB Entry
- https://github.com/wllovemy/cve/issues/9Exploit, Issue Tracking, Third Party Advisory
Timeline
- Published
- Jul 30, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed