CVE-2025-63622
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
A vulnerability was found in code-projects Online Complaint Site 1.0 affecting the file /cms/admin/subcategory.php. Manipulation of the category argument leads to SQL injection.
Risk Assessment
SQL injection may allow an attacker to read, modify, or delete database data, and in some cases execute commands on the server.
Recommendation
Apply the patch or update the application to a version where the issue is fixed; until then, validate input and use parameterized queries.
Other vulnerabilities in Online Complaint Site
See all- CVE-2025-11552Medium
A SQL injection vulnerability was identified in Online Complaint Site 1.0 in /admin/category.php. Manipulation of the Category argument allows remote SQL injection. The exploit is public.
- CVE-2025-11530Medium
A SQL injection vulnerability was identified in Online Complaint Site 1.0 in /cms/admin/state.php. Manipulation of the state argument allows remote SQL injection. The exploit is public.
- CVE-2025-11516Medium
A SQL injection vulnerability was identified in Online Complaint Site 1.0 in /cms/users/complaint-details.php. Manipulation of the cid argument allows remote SQL injection. The exploit is public.
- CVE-2025-11515Medium
A SQL injection vulnerability was discovered in Online Complaint Site 1.0 in /cms/users/register-complaint.php. Manipulation of the cid argument allows remote SQL injection. The exploit is public.
- CVE-2025-11514Medium
A SQL injection vulnerability was identified in Online Complaint Site 1.0 in /cms/users/index.php. Manipulation of the Username argument allows remote SQL injection. The exploit is public.
Original NVD description (English source)
A vulnerability was found in code-projects Online Complaint Site 1.0. This issue affects some unknown processing of the file /cms/admin/subcategory.php. This manipulation of the argument category causes SQL injection.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS