CVE-2025-8375 is a critical SQL injection vulnerability affecting code-projects Vehicle Management 1.0, specifically within the /addvehicle.php file when processing the 'vehicle' argument. This flaw allows for remote, unauthenticated attacks with high impact on confidentiality, integrity, and availability, as indicated by its CVSS score of 9.8. While there is no evidence of active exploitation or readily available exploit tools like Metasploit or ExploitDB, the exploit details have been publicly disclosed. The vulnerability has garnered significant community discussion, with 11 mentions across various platforms.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.0CPE matchmatch criteria | cpe:2.3:a:code-projects:vehicle_management:1.0:*:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.