PT-2025-18306 · Sourcecodester · Sourcecodester Simple Parking Management System

Published 2025-04-30 · Updated 2025-05-02 · CVE-2025-44192

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SourceCodester Simple Barangay Management System version 1.0

Description The issue is a SQL injection vulnerability located in the "/barangay management/admin/?page=view clearance" API endpoint. This vulnerability can be exploited to inject malicious SQL code, potentially leading to unauthorized access or data manipulation.

Recommendations For SourceCodester Simple Barangay Management System version 1.0, consider disabling access to the "/barangay management/admin/?page=view clearance" API endpoint until a patch is available. Restricting input validation and sanitization for this endpoint can also help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-44192

Affected Products

Sourcecodester Simple Parking Management System

References · 7

• 🔥 https://github.com/red-team00/bug_report/blob/main/simple-barangay-management-system/SQLi-1.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-44192 · Security Note
• https://osv.dev/vulnerability/CVE-2025-44192 · Vendor Advisory
• https://t.me/cvetracker/22743 · Telegram Post
• https://twitter.com/CVEnew/status/1917637664360001603 · Twitter Post
• https://t.me/cvenotify/120660 · Telegram Post
• https://t.me/cvedetector/24144 · Telegram Post