CVE-2025-12243 | code-projects Client Details System 1.0 GET Parameter welcome.php ID sql injection

October 26, 2025 Yanac

A vulnerability has been found in code-projects Client Details System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file clientdetails/welcome.php of the component GET Parameter Handler. Performing manipulation of the argument ID results in sql injection.

This vulnerability was named CVE-2025-12243. The attack may be initiated remotely. In addition, an exploit is available.VulDB Recent EntriesRead More