CVE-2025-10791 | code-projects Online Bidding System 1.0 /administrator/index.php aduser sql injection

September 21, 2025 Yanac

A vulnerability marked as critical has been reported in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administrator/index.php. This manipulation of the argument aduser causes sql injection.

This vulnerability is tracked as CVE-2025-10791. The attack is possible to be carried out remotely. Moreover, an exploit is present.VulDB Recent EntriesRead More