CVE-2025-12929
🟡 Monitoruj
Wstrzyknięcie SQL w SourceCodester Survey Application System umożliwia zdalne manipulowanie danymi.
CVSS
7.3
EPSS
0.4%
Exploit
poc
Vendor
oretnom23
Opis źródłowy (NVD)
A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function save_user/update_user of the file /LoginRegistration.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. Other parameters might be affected as well.
exploit sql-injection
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 7.3 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 0.4% |
| Opublikowano (NVD) | 2025-11-10 04:15:41 UTC |
| Ostatnia modyfikacja (NVD) | 2026-10-07 21:10:00 UTC |
Referencje
- https://github.com/lakshayyverma/CVE-Discovery/blob/main/Survey%20Application%20System.md ([email protected]) [Exploit, Third Party Advisory]
- https://vuldb.com/?ctiid.331649 ([email protected]) [Permissions Required, VDB Entry]
- https://vuldb.com/?id.331649 ([email protected]) [Third Party Advisory, VDB Entry]
- https://vuldb.com/?submit.681746 ([email protected]) [Third Party Advisory, VDB Entry]
- https://www.sourcecodester.com/ ([email protected]) [Product]