CVE-2025-5633: code-projects/anirbandutta9 Content Management System/News-Buzz users.php sql injection
Description
A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/users.php. The manipulation of the argument delete leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Eine kritische Schwachstelle wurde in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0 ausgemacht. Davon betroffen ist unbekannter Code der Datei /admin/users.php. Durch das Manipulieren des Arguments delete mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
Classification
CVE ID: CVE-2025-5633
CVSS Base Severity: MEDIUM
CVSS Base Score: 6.3
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected Products
Vendor: code-projects, anirbandutta9
Product: Content Management System, News-Buzz
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.03% (probability of being exploited)
EPSS Percentile: 5.55% (scored less or equal to compared to others)
EPSS Date: 2025-06-07 (when was this score calculated)
References
https://nvd.nist.gov/vuln/detail/CVE-2025-5633https://vuldb.com/?id.311120
https://vuldb.com/?ctiid.311120
https://vuldb.com/?submit.589783
https://github.com/YZS17/CVE/blob/main/NEWS-BUZZ/sqli_users.php_delete.md