DFIR Lab@DFIR_Lab
🚨 HIGH: CVE-2025-15185 (CVSS 7.3) - SQL Injection in Refugee Food Management System 1.0. Remote exploit published. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/hzNGF6BAEg
0000014
142 followersView on X
CVE-2025-15185(fabian / refugee_food_management_system)
LOWCVSS 9.8 · CRITICALSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in code-projects Refugee Food Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /home/refugeesreport.php. This manipulation of the argument a causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.
0.0/ 10 priority
Sources & remediation
Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-74CWE-89
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- refugee_food_management_system
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day
Affected systems
Vendors
Products
refugee_food_management_system
1 version affected across 1 product
Deep dive
Activity timeline1 mentions / 1d
Full discourse1 post
CPE platform detail1 entries
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | fabian | refugee_food_management_system | 1.0 | - | - |