CVE-2025-7514

CVE-2025-7514 affects code-projects Modern Bag 1.0. The vulnerability is an SQL injection in /admin/contact-list.php, caused by unsanitized handling of the idStatus parameter. This allows remote exploitation and data leakage of the database as described in multiple sources. Remediation mentioned ...

CVE-2025-7514: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Modern Bag 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/contact-list.php. The manipulation of the argument idStatus leads to sql injection. The attack may be launched remotely. The exploit ha...