CVE-2025-5651: A vulnerability, which was classified as problematic, has been found in code-projects Traffic Offense Reporting System 1.0. This issue affects some unknown processing of the file saveuser.php. The ...

Summary

A vulnerability, which was classified as problematic, has been found in code-projects Traffic Offense Reporting System 1.0. This issue affects some unknown processing of the file saveuser.php. The manipulation of the argument user_id/username/email/name/position leads to cross site scripting. The at...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
carmelo	traffic_offense_reporting_system	1.0 `cpe:2.3:a:carmelo:traffic_offense_reporting_system:1.0:::::::*`

Original advisory text

A vulnerability, which was classified as problematic, has been found in code-projects Traffic Offense Reporting System 1.0. This issue affects some unknown processing of the file saveuser.php. The ...

A vulnerability, which was classified as problematic, has been found in code-projects Traffic Offense Reporting System 1.0. This issue affects some unknown processing of the file saveuser.php. The manipulation of the argument user_id/username/email/name/position leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

References

https://code-projects.org/ Product
https://vuldb.com/?ctiid.311141 Permissions Required Third Party Advisory VDB Entry
https://vuldb.com/?id.311141 Third Party Advisory VDB Entry
https://vuldb.com/?submit.589962 Third Party Advisory VDB Entry
https://github.com/tuooo/CVE/issues/1 Exploit Issue Tracking