CVE-2025-14950

Code-projects Scholars Tracking System 1.0 is affected by an SQL injection in the delete_post.php handler. The vulnerability stems from improper handling of the ID parameter in the delete_post.php route, permitting remote exploitation. Multiple sources confirm that the exploit has been publicly r...

CVE-2025-14950 code-projects Scholars Tracking System delete_post.php sql injection

A weakness has been identified in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /deletepost.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to t...