SQL Injection Vulnerability in SourceCodester Music Class Enrollment System

CVE-2025-3589

Summary

A SQL injection vulnerability has been identified in the Music Class Enrollment System 1.0 developed by SourceCodester. The flaw exists in the unknown function of the /manage_class.php file, where manipulation of the 'ID' argument may allow an attacker to execute arbitrary SQL queries. This can be exploited remotely, leading to unauthorized data access and potential data manipulation. With the exploit publicly disclosed, it emphasizes the urgency for users to secure their applications against such vulnerabilities to prevent possible attacks.

References