CVE-2025-15195

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file /admin/add-module.php. This manipulation of the argument linked[] causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

• CWE-74
• CWE-89

• https://code-projects.org/Product
• https://github.com/Limingqian123/CVE/issues/3Exploit, Issue Tracking, Third Party Advisory
• https://vuldb.com/?ctiid.338582Permissions Required, VDB Entry
• https://vuldb.com/?id.338582Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.724717Third Party Advisory, VDB Entry
• https://github.com/Limingqian123/CVE/issues/3Exploit, Issue Tracking, Third Party Advisory

Published

Dec 29, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-15189A vulnerability was identified in D-Link DWR-M920 up to 1.1.…8.8
• CVE-2025-15190A security flaw has been discovered in D-Link DWR-M920 up to…8.8
• CVE-2025-15191A weakness has been identified in D-Link DWR-M920 up to 1.1.…8.8
• CVE-2025-15192A security vulnerability has been detected in D-Link DWR-M92…8.8
• CVE-2025-15193A vulnerability was detected in D-Link DWR-M920 up to 1.1.50…8.8
• CVE-2025-15194A vulnerability was found in D-Link DIR-600 up to 2.15WWb02.…9.8
• CVE-2025-15196A vulnerability was identified in code-projects Assessment M…9.8
• CVE-2025-15197A security flaw has been discovered in code-projects/anirban…7.2
• CVE-2025-15198A weakness has been identified in code-projects College Note…9.8
• CVE-2025-15199A security vulnerability has been detected in code-projects …8.8
• CVE-2025-1520PostHog ClickHouse Table Functions SQL Injection Remote Code…8
• CVE-2025-15200A vulnerability was detected in SohuTV CacheCloud up to 3.2.…4.8