CVE-2025-8333

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in code-projects Online Farm System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /categoryvalue.php. The manipulation of the argument Value leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
code-projects	Online Farm System	1.0

References

https://code-projects.org/Product
https://github.com/wllovemy/cve/issues/8Exploit, Issue Tracking, Third Party Advisory
https://vuldb.com/?ctiid.318283Permissions Required, VDB Entry
https://vuldb.com/?id.318283Third Party Advisory, VDB Entry
https://vuldb.com/?submit.624004Third Party Advisory, VDB Entry
https://github.com/wllovemy/cve/issues/8Exploit, Issue Tracking, Third Party Advisory

Timeline

Published: Jul 30, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-83349.8A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. Affected by this issue is so CVE-2025-83354.3A vulnerability classified as problematic has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part. The ma CVE-2025-83369.8A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerability affects unknown c CVE-2025-83375.4A vulnerability, which was classified as problematic, has been found in code-projects Simple Car Rental System 1.0. This issue affects some CVE-2025-83389.8A vulnerability was found in projectworlds Online Admission System 1.0 and classified as critical. Affected by this issue is some unknown fu CVE-2025-83399.8A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been classified as critical. This affects an unkn CVE-2025-83406.1A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been declared as problematic. This vulnerability CVE-2025-83415.0Grafana is an open-source platform for monitoring and observability. The Infinity datasource plugin, maintained by Grafana Labs, allows visu CVE-2025-83428.1The WooCommerce OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass due to insufficien CVE-2025-83439.8A vulnerability was found in openviglet shio up to 0.3.8. It has been rated as critical. This issue affects the function shStaticFilePreUplo CVE-2025-83449.8A vulnerability classified as critical has been found in openviglet shio up to 0.3.8. Affected is the function shStaticFileUpload of the fil CVE-2025-83459.8A vulnerability classified as critical was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. Affected by this vu