CVE-2025-13580

MediumCVSS 6.3

Published: 24/11/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

21th percentile - higher than 21% of all known CVEs

Summary

SQL injection vulnerability in /mail.php of code-projects Library System 1.0. Manipulation of the ID argument leads to SQL injection. Attack can be performed remotely, exploit is public.

Risk Assessment

An attacker can read or modify library data, including user and borrowing information.

Recommendation

Apply patches or use prepared statements.

Other vulnerabilities in code-projects Library System

CVE-2025-13579Medium
SQL injection vulnerability in /return.php of code-projects Library System 1.0. Manipulation of the ID argument results in SQL injection. Attack can be launched remotely, exploit is public.

Original NVD description (English source)

A vulnerability was determined in code-projects Library System 1.0. Affected is an unknown function of the file /mail.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS