CVE-2025-13396

Publication date

2025-11-19 15:32:05

Family

VulDB

State

PUBLISHED

Description

A weakness has been identified in code-projects Courier Management System 1.0. This affects an unknown function of the file /add-office.php. This manipulation of the argument OfficeName causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.