CVE-2025-9610
📊 6.9 MEDIUM⚡ 0.0%🎯 0 exploits
📅 Published Aug 29, 2025
📋 Status: Analyzed
A vulnerability was determined in code-projects Online Event Judging System 1.0. This issue affects some unknown processing of the file /create_account.php. This manipulation of the argument fname causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Other parameters might be affected as well.
CVSS v3.1 • [email protected]
🎯 Affected Products & Systems
1 product configurations affected
Filter by type:
| Type | Vendor | Product | Version Range | Status | CPE String |
|---|---|---|---|---|---|
📱App | carmelogarcia | online event judging system | 1.0 | Vulnerable | cpe:2.3:a:carmelogarcia:online_event_judging_system:1.0:*:*:*:*:*:*:* |
📱
VulnerableApplication
Version: 1.0
CPE:
cpe:2.3:a:carmelogarcia:online_event_judging_system:1.0:*:*:*:*:*:*:*
Metrics
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
🔍 Technical Details
Analysis Status
AnalyzedCVSS Details
6.9 (MEDIUM)v4.0
Source: [email protected]
EPSS Details
0.0% (Minimal)9.7th percentile
Last updated: Oct 31, 2025
Exploitation probability within 30 days
Published Date
Aug 29, 2025 (2 months ago)
Last Modified
Sep 9, 2025 (1 month ago)
Security Weaknesses3
CWE-74CWE-89
References5
NVDgeneralgeneral+2