CVE-2025-0563

A vulnerability was found in code-projects Fantasy-Cricket 1.0. It has been classified as critical. Affected is an unknown function of the file /dash/update.php. The manipulation of the argument uname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-0563 code-projects Fantasy-Cricket update.php sql injection

A vulnerability was found in code-projects Fantasy-Cricket 1.0. It has been classified as critical. Affected is an unknown function of the file /dash/update.php. The manipulation of the argument uname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-0563

CVE-2025-0563 affects code-projects Fantasy-Cricket 1.0. The vulnerability is a SQL injection in the file /dash/update.php caused by unsafely using the uname parameter in SQL queries. It can be exploited remotely and is supported by visible PoC and attack details (time-based blind payloads). Publ...