CVE-2025-6446: A vulnerability, which was classified as critical, has been found in code-projects Client Details System 1.0. This issue affects some unknown processing of the file /clientdetails/admin/index.php. ...

Summary

A vulnerability, which was classified as critical, has been found in code-projects Client Details System 1.0. This issue affects some unknown processing of the file /clientdetails/admin/index.php. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely....

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
fabian	client_details_system	1.0 `cpe:2.3:a:fabian:client_details_system:1.0:::::::*`

Original advisory text

A vulnerability, which was classified as critical, has been found in code-projects Client Details System 1.0. This issue affects some unknown processing of the file /clientdetails/admin/index.php. ...

A vulnerability, which was classified as critical, has been found in code-projects Client Details System 1.0. This issue affects some unknown processing of the file /clientdetails/admin/index.php. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

References

https://code-projects.org/ Product
https://vuldb.com/?ctiid.313553 Permissions Required VDB Entry
https://vuldb.com/?id.313553 Third Party Advisory VDB Entry
https://vuldb.com/?submit.598499 Third Party Advisory VDB Entry
https://github.com/kakalalaww/CVE/issues/18 Exploit Issue Tracking Third Party Advisory