PT-2025-38225 · Sourcecodester · Online Exam Form Submission

Quchunyi2 · Published 2025-09-17 · Updated 2025-09-17 · CVE-2025-10601

NVD

CVSS v2.0

7.5

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

A vulnerability has been found in SourceCodester Online Exam Form Submission 1.0. Affected is an unknown function of the file /admin/index.php. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2025-10601

Affected Products

Online Exam Form Submission

References · 6

• 🔥 https://github.com/qcycop0101-hash/CVE/issues/19 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10601 · Security Note
• https://sourcecodester.com · Note
• https://vuldb.com/?id.324621 · Note
• https://vuldb.com/?submit.649542 · Note
• https://vuldb.com/?ctiid.324621 · Note