CVE-2025-14939 MEDIUM

CVE-2025-14939: code-projects Online Appointment Booking System deletemanager.php sql injection

Vendor Code-Projects

Product Online Appointment Booking System

Weakness CWE-89 · SQLi

Published December 19, 2025

Last update December 19, 2025

View on NVD All CVEs

CVSS base score

5.1/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the file /admin/deletemanager.php. The manipulation of the argument managername results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.

Key dates

02Disclosure timeline

December 19, 2025 CVE published

December 19, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-14939 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2025-7543 PHPGurukul User Registration & Login and User Management System manage-users.php sql injection CVE-2025-8331 code-projects Online Farm System forgot_pass.php sql injection CVE-2025-4485 itsourcecode Gym Management System ajax.php sql injection CVE-2025-11893 Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More <= 1.8.8.4 - Authenticated (Subscriber+) SQL Injection CVE-2025-13546 ashraf-kabir travel-agency Search results.php sql injection