CVE-2025-15181

A security flaw has been discovered in code-projects Refugee Food Management System 1.0. The impacted element is an unknown function of the file /home/pagenateRefugeesList.php. Performing manipulation of the argument rfid results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited.
References
Link Resource
https://code-projects.org/ Product
https://github.com/ctg503/CVE/issues/1 Exploit Issue Tracking
https://vuldb.com/?ctiid.338566 Permissions Required VDB Entry
https://vuldb.com/?id.338566 Third Party Advisory VDB Entry
https://vuldb.com/?submit.721270 Third Party Advisory VDB Entry
https://vuldb.com/?submit.722805 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:fabian:refugee_food_management_system:1.0:*:*:*:*:*:*:*

History

30 Dec 2025, 20:45

Type Values Removed Values Added
First Time Fabian
Fabian refugee Food Management System
References () https://code-projects.org/ - () https://code-projects.org/ - Product
References () https://github.com/ctg503/CVE/issues/1 - () https://github.com/ctg503/CVE/issues/1 - Exploit, Issue Tracking
References () https://vuldb.com/?ctiid.338566 - () https://vuldb.com/?ctiid.338566 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.338566 - () https://vuldb.com/?id.338566 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.721270 - () https://vuldb.com/?submit.721270 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.722805 - () https://vuldb.com/?submit.722805 - Third Party Advisory, VDB Entry
CPE cpe:2.3:a:fabian:refugee_food_management_system:1.0:*:*:*:*:*:*:*

29 Dec 2025, 09:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-12-29 09:15

Updated : 2025-12-30 20:45


NVD link : CVE-2025-15181

Mitre link : CVE-2025-15181

CVE.ORG link : CVE-2025-15181


JSON object : View

Products Affected

fabian

  • refugee_food_management_system
CWE
CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')