PT-2025-38287 · Unknown · Sourcecodester Online Exam Form

Quchunyi1 · Published 2025-09-17 · Updated 2025-09-18 · CVE-2025-10625

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SourceCodester Online Exam Form Submission version 1.0

Description A SQL injection issue exists due to the manipulation of the phone argument in the file /user/dashboard.php?page=update profile. The attack can be launched remotely. The exploit is publicly available. Other parameters may also be affected.

Recommendations Sanitize the phone argument to prevent SQL injection. Review and sanitize all other input parameters to mitigate potential risks.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-10625

Affected Products

Sourcecodester Online Exam Form

References · 11

• 🔥 https://github.com/qcycop0101-hash/CVE/issues/24 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10625 · Security Note
• https://osv.dev/vulnerability/CVE-2025-10625 · Vendor Advisory
• https://t.me/cveNotify/135810 · Telegram Post
• https://twitter.com/CVEnew/status/1968561155950993782 · Twitter Post
• https://vuldb.com/?id.324655 · Note
• https://vuldb.com/?submit.650444 · Note
• https://vuldb.com/?ctiid.324655 · Note
• https://sourcecodester.com · Note
• https://t.me/cveNotify/135741 · Telegram Post
• https://t.me/CVEtracker/32812 · Telegram Post