CVE-2025-13579

MediumCVSS 6.3

Published: 24/11/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

21th percentile - higher than 21% of all known CVEs

Summary

SQL injection vulnerability in /return.php of code-projects Library System 1.0. Manipulation of the ID argument results in SQL injection. Attack can be launched remotely, exploit is public.

Risk Assessment

An attacker can gain unauthorized access to library data and manipulate it.

Recommendation

Apply patches or use prepared statements.

Other vulnerabilities in code-projects Library System

CVE-2025-13580Medium
SQL injection vulnerability in /mail.php of code-projects Library System 1.0. Manipulation of the ID argument leads to SQL injection. Attack can be performed remotely, exploit is public.

Original NVD description (English source)

A vulnerability was found in code-projects Library System 1.0. This impacts an unknown function of the file /return.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS