CVE-2025-8409

A vulnerability has been found in code-projects Vehicle Management 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /filter.php. The manipulation of the argument from leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

• CWE-74
• CWE-89

• https://code-projects.org/Product
• https://github.com/wllovemy/cve/issues/1Exploit, Issue Tracking, Third Party Advisory
• https://vuldb.com/?ctiid.318397Permissions Required, VDB Entry
• https://vuldb.com/?id.318397Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.624011Third Party Advisory, VDB Entry

Published

Jul 31, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-8402Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11…4.9
• CVE-2025-8404Stack buffer overflow vulnerability exists in the Supermicro…5.5
• CVE-2025-8405GitLab has remediated a security issue in GitLab CE/EE affec…7.7
• CVE-2025-8406ZenML version 0.83.1 is affected by a path traversal vulnera…7.8
• CVE-2025-8407A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-8408A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-8410Use After Free vulnerability in RTI Connext Professional (Se…7.4
• CVE-2025-8411Improper Neutralization of Input During Web Page Generation …7.1
• CVE-2025-8412A Buffer Copy without Checking Size of Input ('Classic Buffe…2
• CVE-2025-8413The Listeo theme for WordPress is vulnerable to Stored Cross…6.4
• CVE-2025-8414Due to improper input validation, a buffer overflow vulnerab…9.4
• CVE-2025-8415A vulnerability was found in the Cryostat HTTP API. Cryostat…5.9