CVE-2025-14216

CVE-2025-14216 affects code-projects Currency Exchange System 1.0. The issue stems from improper handling of the ID parameter in /viewserial.php, causing a SQL injection that can be exploited remotely. Public exploit is noted. Multiple connected sources corroborate the vulnerability and its risk;...

CVE-2025-14215

The CVE-2025-14215 entry affects Currency Exchange System 1.0, specifically the /edit.php file where manipulating the ID parameter enables SQL injection. The vulnerability is remote and has public exploitation activity, with varied CVSS assessments (high/critical ranges) indicating potential impa...

CVE-2025-14217

CVE-2025-14217 describes a SQL injection vulnerability in Currency Exchange System 1.0, arising from lack of validation of the SQL statement in the parameter ID of the file /edittrns.php. Multiple connected sources (CNVD, Red Hat, CNNVD, CVE lists, PT-SEC) confirm remote exploitation and public a...

CVE-2025-14218

CVE-2025-14218 affects code-projects Currency Exchange System version 1.0, specifically the /editotheraccount.php file. The vulnerability arises from an injectable ID parameter in an unknown function, enabling SQL injection that can be exploited remotely. Multiple connected sources reiterate that...