Threats tagged 'ghsa-25cw-724w-j3fq'

CVE-2025-13303 is a SQL injection vulnerability in code-projects Courier Management System 1.0 affecting the /search-edit.php file via the Consignment parameter. The vulnerability allows remote attackers with low privileges to manipulate SQL queries, potentially impacting confidentiality, integrity, and availability. Public exploit code has been disclosed. No patch or fixed version information is currently available.