CVE-2025-15182

A weakness has been identified in code-projects Refugee Food Management System 1.0. This affects an unknown function of the file /home/served.php. Executing manipulation of the argument refNo can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.
References
Link Resource
https://code-projects.org/ Product
https://github.com/ctg503/CVE/issues/2 Permissions Required VDB Entry
https://vuldb.com/?ctiid.338567 Third Party Advisory VDB Entry Permissions Required
https://vuldb.com/?id.338567 Third Party Advisory VDB Entry
https://vuldb.com/?submit.721272 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:fabian:refugee_food_management_system:1.0:*:*:*:*:*:*:*

History

30 Dec 2025, 21:11

Type Values Removed Values Added
First Time Fabian
Fabian refugee Food Management System
CPE cpe:2.3:a:fabian:refugee_food_management_system:1.0:*:*:*:*:*:*:*
References () https://code-projects.org/ - () https://code-projects.org/ - Product
References () https://github.com/ctg503/CVE/issues/2 - () https://github.com/ctg503/CVE/issues/2 - Permissions Required, VDB Entry
References () https://vuldb.com/?ctiid.338567 - () https://vuldb.com/?ctiid.338567 - Third Party Advisory, VDB Entry, Permissions Required
References () https://vuldb.com/?id.338567 - () https://vuldb.com/?id.338567 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.721272 - () https://vuldb.com/?submit.721272 - Third Party Advisory, VDB Entry

29 Dec 2025, 10:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-12-29 10:15

Updated : 2025-12-30 21:11


NVD link : CVE-2025-15182

Mitre link : CVE-2025-15182

CVE.ORG link : CVE-2025-15182


JSON object : View

Products Affected

fabian

  • refugee_food_management_system
CWE
CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')