Description
A security flaw has been discovered in code-projects Refugee Food Management System 1.0. Affected by this issue is some unknown functionality of the file /home/editrefugee.php. The manipulation of the argument rfid results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be exploited.
References
Product
https://github.com/11alert/CVE/issues/1
ExploitIssue TrackingThird Party Advisory
https://vuldb.com/?ctiid.338593
Permissions RequiredVDB Entry
Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.721753
Third Party AdvisoryVDB Entry
https://github.com/11alert/CVE/issues/1
ExploitIssue TrackingThird Party Advisory
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
7.3 · High
Information
Source identifier
Vulnerability status
Analyzed
Published
2025-12-29T23:15:42.313Z
3 weeks agoLast modified
2026-01-07T20:51:56.960Z
2 weeks ago