CVE-2025-70152 | code-projects Project Scholars Tracking System 1.0 Endpoint /admin/save_user.php firstname/lastname/username/password/user_id sql injection

A vulnerability was found in code-projects Project Scholars Tracking System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/save_user.php of the component Endpoint. Such manipulation of the argument firstname/lastname/username/password/user_id leads to sql injection.

This vulnerability is documented as CVE-2025-70152. The attack can be executed remotely. There is not any exploit available.