CVE-2025-8250

published 2025-07-28

CVE-2025-8250: A vulnerability, which was classified as critical, was found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file…

medium 5.5 CVSS 4.0

AV N AC L AT N PR N UI N VC L VI L VA L SC N SI N SA N E P CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A vulnerability, which was classified as critical, was found in code-projects Exam Form Submission 1.0. Affected is an unknown function of the file /admin/update_s4.php. The manipulation of the argument credits leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
code-projects	exam_form_submission	—	—
msrc	azl3_kernel_6.6.96.2-1_on_azure_linux_3.0	—	—
msrc	azl3_kernel_6.6.96.2-2_on_azure_linux_3.0	—	—
msrc	azl3_wireshark_4.4.7-1_on_azure_linux_3.0	—	—
msrc	cbl2_kernel_5.15.186.1-1_on_cbl_mariner_2.0	—	—
msrc	cm1_kernel_5.4.91-1_on_cbl_mariner_1.0	—	—

CWE-74 CWE-89 CWE-825 CWE-476 CWE-362