CVE-2025-7181

CVE-2025-7181 affects code-projects Staff Audit System 1.0. The vulnerability is in an unknown function of /test.php where manipulating the uploadedfile parameter enables unrestricted file uploads, allowing remote exploitation. Public exploit information exists in the CVE description. Several sou...

CVE-2025-6884

CVE-2025-6884 affects code-projects Staff Audit System 1.0. The vulnerability lies in the /search_index.php file, where unvalidated input in the Search parameter enables SQL injection. Reported as remote and exploitable, with public disclosure noted in multiple sources; impact is data confidentia...

CVE-2025-7180

CVE-2025-7180 affects code-projects Staff Audit System 1.0. The vulnerability is in the processing of /login.php, where manipulating the User argument enables SQL injection. This can be exploited remotely and, per sources, the exploit has been disclosed publicly. Multiple sources rate the impact ...

CVE-2025-6883

Staff Audit System 1.0 contains a SQL injection vulnerability in /update_index.php via the updateid parameter. Root cause: unsanitized SQL statements from externally provided updateid. Impact: remote attacker can execute arbitrary SQL, potentially stealing data. Exploitation is publicly disclosed...