PT-2025-38228 · Sourcecodester · Online Exam Form Submission

Quchunyi2 · Published 2025-09-17 · Updated 2025-09-17 · CVE-2025-10602

NVD

CVSS v2.0

6.5

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was found in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/delete s1.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2025-10602

Affected Products

Online Exam Form Submission

References · 6

• 🔥 https://github.com/qcycop0101-hash/CVE/issues/20 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10602 · Security Note
• https://vuldb.com/?ctiid.324622 · Note
• https://sourcecodester.com · Note
• https://vuldb.com/?id.324622 · Note
• https://vuldb.com/?submit.649543 · Note