PT-2025-6847 · Sourcecodester · Sourcecodester Best Church Management

Yesec · CVE-2025-1202 · Published 2025-02-12 · Updated 2025-02-12

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Best Church Management Software version 1.1

Description A critical issue has been found in the software, affecting an unknown function of the file /admin/edit slider.php. The manipulation of the id argument leads to SQL injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Recommendations For version 1.1, consider disabling the /admin/edit slider.php file or restricting access to it until a patch is available. Avoid using the id argument in the affected file to minimize the risk of exploitation.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-1202

Affected Products

Sourcecodester Best Church Management

References · 9

• 🔥 https://github.com/Yesec/Best-church-management-software/blob/main/edit_slider.php.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-1202 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-1202 · Security Note
• https://sourcecodester.com · Note
• https://vuldb.com/?id.295110 · Note
• https://twitter.com/CVEnew/status/1889761660174475476 · Twitter Post
• https://vuldb.com/?ctiid.295110 · Note
• https://vuldb.com/?submit.496954 · Note
• https://t.me/cvedetector/17898 · Telegram Post