← Database

CVE-2025-12254

MEDIUM CVSS: 6.3 Published: 2025-10-27 Modified: 2026-06-17

Description

A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected by this issue is some unknown functionality of the file /add_judge.php. Such manipulation of the argument fullname leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.

Affected Platforms

Carmelo Online Event Judging System

Weakness Type

CWE-74, CWE-89

References