PT-2025-20582 · Sourcecodester · Sourcecodester Client Database Management System

Published 2025-05-09 · Updated 2025-12-27 · CVE-2025-46192

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0

Description The software is susceptible to a SQL Injection issue within the user payment update.php file. The issue occurs through the order id POST parameter. The vulnerability allows for potential unauthorized access or modification of the database.

Recommendations SourceCodester Client Database Management System version 1.0: Sanitize or validate the order id POST parameter in the user payment update.php file to prevent SQL Injection.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-46192

Affected Products

Sourcecodester Client Database Management System

References · 10

• 🔥 https://github.com/x6vrn/mitre/blob/main/CVE-2025-46192.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-46192 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-46192 · Security Note
• https://twitter.com/cybercronai/status/1921286762069897515 · Twitter Post
• https://t.me/cvedetector/24957 · Telegram Post
• https://t.me/cvetracker/23504 · Telegram Post
• https://invicti.com/learn/blind-sql-injection · Note
• https://twitter.com/cybercronai/status/1921212468656853472 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1kjxji5/top_10_trending_cves_11052025 · Reddit Post
• https://twitter.com/CVEnew/status/2005031841472926002 · Twitter Post