Description

A vulnerability was detected in code-projects Assessment Management 1.0. The affected element is an unknown function of the file /welcome.php. The manipulation of the argument userid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "7.3",
  "pubDate": "2026-08-20T00:16:52.817Z",
  "pubdate": "2026-08-20T00:16:52.817Z",
  "executiveSummary": "A security vulnerability has been identified in code-projects Assessment Management 1.0, specifically within the handling of parameters in the /welcome.php file. The vulnerability is classified as a SQL Injection (SQLi) flaw, which arises from the improper sanitization and validation of user-supplied input.\nThe primary impact of this vulnerability is the potential compromise of the backend database. An unauthenticated or remote attacker can manipulate the userid argument to execute arbitrary SQL commands within the context of the database application. This may lead to unauthorized data access, data modification, database exfiltration, or complete system compromise depending on database privileges.\nThe attack vector is fully remote, requiring network connectivity to the targeted web application. Because exploit details and payloads are publicly available, the risk implications are critical, lowering the barrier to entry for malicious actors seeking to compromise vulnerable deployments of Assessment Management 1.0.\nOrganizations utilizing the affected product must implement robust input validation and secure coding practices immediately to neutralize the risk of exploitation.",
  "technicalDetails": "The vulnerability resides in the /welcome.php endpoint of code-projects Assessment Management 1.0, where an unknown function improperly processes the userid parameter. The root cause of the vulnerability is the direct concatenation or unsafe handling of user-supplied input into dynamic SQL query strings without adequate parameterization, escaping, or input sanitization.\nExploitation of this vulnerability occurs remotely over the network. An attacker interacts with the /welcome.php script by supplying a crafted payload via the userid argument. Because the application fails to adequately validate or bind the parameter, the malicious input is interpreted directly by the underlying database management system as executable SQL syntax.\nThe attack flow proceeds as follows: First, the attacker identifies the vulnerable /welcome.php entry point and targets the userid parameter. Second, the attacker crafts a malicious input string containing SQL commands, such as UNION-based queries, boolean-based injections, or error-based payloads designed to extract data or manipulate database logic. Third, the HTTP request containing the payload is transmitted to the server. Fourth, the vulnerable function processes the input and concatenates it directly into the SQL query execution pipeline. Finally, the database executes the resulting malicious query, returning sensitive information or performing unauthorized database modifications back to the application and the attacker.\nAuthentication and privilege requirements for this attack depend on the surrounding application logic, but remote exploitability indicates that network exposure is present. The post-exploitation impact includes unauthorized data disclosure, potential authentication bypass, compromise of stored credentials, and severe degradation of data integrity."
}