| 제목 | code-projects Task Management System In PHP With Source Code 1.0 SQL Injection |
|---|
| 설명 | Independent testing confirms that the Code-Projects distribution of Task Management System In PHP With Source Code is affected by the administrator login SQL injection tracked as CVE-2025-0846 and VDB-294009.
The affected component is /admin/AdminLogin.php and the affected argument is email. The application concatenates attacker-controlled email and password values into SQL conditions without parameter binding.
A remote unauthenticated attacker can alter the SQL query, return a controlled administrator row, obtain an authenticated PHP session, and access AdminHome.php.
The affected Code-Projects package is distributed from:
https://code-projects.org/task-management-system-in-php-with-source-code/
The package downloaded and tested on June 22, 2026 has the following SHA-256:
8a4bf7950b97ea99e05ff9655185678fc1b13b5d79099f3aa7060dd438ac1d54
Public advisory, proof of concept, baseline comparison, and redacted reproduction screenshots:
https://github.com/littleRain1355/PHPissue/issues/2
The Code-Projects and 1000 Projects packages use different publisher and product labels, README content, user-facing role terminology, and demonstration data. Source comparison confirms that the vulnerable administrator login query is shared.
This submission is additional affected-product and distribution evidence for the vulnerability already tracked as CVE-2025-0846 and VDB-294009.
Please merge this submission into VDB-294009 / CVE-2025-0846 and add the following affected product:
Vendor: Code-Projects
Product: Task Management System In PHP With Source Code
Version: 1.0
The Code-Projects product page does not explicitly display a version identifier. Version 1.0 is used to align this distribution with the existing source-code lineage record.
Vendor contact:
Code-Projects was notified by email at [email protected] from [email protected] on June 22, 2026. The disclosure email was successfully sent and a response is pending. |
|---|
| 원천 | ⚠️ https://github.com/littleRain1355/PHPissue/issues/2 |
|---|
| 사용자 | rainless100792 (UID 84115) |
|---|
| 제출 | 2026. 06. 22. PM 03:17 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 08. 08. PM 03:32 (2 months later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 387179 [code-projects Task Management System 1.0 /admin/AdminLogin.php email/password SQL 주입] |
|---|
| 포인트들 | 20 |
|---|