CVE-2025-60307
Critical · CVSS 9.8code-projects Computer Laboratory System 1.0 — SQL Injection Authentication Bypass
- CVSS
- 9.8
- nvd
- EPSS
- —
- KEV
- No
- Class
- other
- CWE-89
Description
code-projects Computer Laboratory System 1.0 has a SQL injection vulnerability, where entering a universal password in the Password field on the login page can bypass login attempts.
Search profile — drives PoC discovery
Symbols Passwordloginuniversal password' OR '1'='1admin'--
Keywords CVE-2025-60307Computer Laboratory SystemSQL injectionauthentication bypasslogin bypasscode-projectsuniversal passwordCWE-89
Versions: 1.0
Ranked PoCs (18) — best first
Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.
- ★ 1
- ★ 139Don-No7/Hack-SQL needs reviewgh_search
- ★ 14gh_search
- ★ 12AdityaBhatt3010/Bypassing-Login-via-NoSQL-Operator-Injection-A-MongoDB-Authentication-Hack needs reviewgh_search
- ★ 5gh_search
- ★ 3imvickykumar999/SQL-Injection-Bypass-Authentication needs reviewgh_search · Jupyter Notebook
- ★ 2gh_search · Shell
- ★ 1gh_search
- ★ 1Ko-kn3t/CVE-2020-25273 needs reviewgh_search
- ★ 1Nick-Robb/sql-injection-tester needs reviewgh_search · Python
- ★ 1cyber-rivet/ADMIN-LOGIN-BYPASS.py needs reviewgh_search · Python
- ★ 0Darknowledge313/CVE-Reports needs reviewgh_search
- ★ 0Swaira-Urooj/LDAP-injector needs reviewgh_search
- ★ 0faizan6342/login-authentication-bypass needs reviewgh_search · PHP
- ★ 0fkie-cad/nvd-json-data-feeds needs reviewtrickest
- ★ 0rafat1999/SQL-Injection-Log-In-Authentication-Bypass needs reviewgh_search
- ★ 0gh_search
- ★ 0zdmobarek-lab/Web_vulnerabilities_report_md needs reviewgh_search
Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.
References
Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-06T06:30:39.000Z