EXPOSURES › CVE-2025-13578

CVE-2025-13578

HIGH

DETAIL

SourceNVD · cve Published2025-11-24 CVSS7.3 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-13578 ↗

▸ RECOMMENDED ACTION Patch the affected products and confirm your instances are covered.

PLAYERS IMPLICATED

code-projects · vendor library system · product

DESCRIPTION

A vulnerability has been found in code-projects Library System 1.0. This affects an unknown function of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.