PT-2025-20575 · Sourcecodester · Sourcecodester Client Database Management System

Published 2025-05-09 · Updated 2025-12-27 · CVE-2025-46188

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0

Description SourceCodester Client Database Management System version 1.0 is susceptible to SQL Injection through the superadmin phpmyadmin.php file. The issue allows for potential unauthorized database access and manipulation. The vulnerable file is superadmin phpmyadmin.php. The vulnerability exists due to insufficient input validation when processing requests to this file.

Recommendations Update SourceCodester Client Database Management System to a newer version that addresses this SQL Injection issue. As a temporary workaround, restrict access to the superadmin phpmyadmin.php file to authorized personnel only.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-46188

Affected Products

Sourcecodester Client Database Management System

References · 10

• 🔥 https://github.com/x6vrn/mitre/blob/main/CVE-2025-46188.md · Exploit
• 🔥 https://medium.com/@bijay.kumar1857/sql-injection-to-rce-exploitation-0a5048e592be · Exploit
• https://osv.dev/vulnerability/CVE-2025-46188 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-46188 · Security Note
• https://t.me/cvedetector/24970 · Telegram Post
• https://twitter.com/CVEnew/status/2005031838071288265 · Twitter Post
• https://twitter.com/cybercronai/status/1921212468656853472 · Twitter Post
• https://twitter.com/cybercronai/status/1921316944268914964 · Twitter Post
• https://t.me/cvetracker/23494 · Telegram Post
• https://reddit.com/r/CVEWatch/comments/1kjxji5/top_10_trending_cves_11052025 · Reddit Post