CVE-2025-14216 — Injection in Currency Exchange System

CWE-74 — InjectionCWE-89 — SQL Injection3 documents3 sources
Severity
6.9MEDIUMNVD
EPSS
0.1%
top 84.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Code-projects Currency Exchange SystemFabian Currency Exchange System
Timeline
PublishedDec 8

Description

A vulnerability was determined in code-projects Currency Exchange System 1.0. This issue affects some unknown processing of the file /viewserial.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-53j3-7xhm-cj8c: A vulnerability was determined in code-projects Currency Exchange System 1↗2025-12-08
▶
CVEList
code-projects Currency Exchange System viewserial.php sql injection↗2025-12-08
▶
CVE-2025-14216 — Injection in Currency Exchange System | cvebase