CVE-2025-70152

creationtimestamp| type| source ---|---|--- 2026-02-18 18:32:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mf5pnzs53q2w...

CVE-2025-70152

code-projects Community Project Scholars Tracking System 1.0 is vulnerable to SQL Injection in the admin user management endpoints /admin/saveuser.php and /admin/updateuser.php. These endpoints lack authentication checks and directly concatenate user-supplied POST parameters firstname, lastname,...