SQL Injection Vulnerability in SourceCodester Music Class Enrollment System
CVE-2025-3589

9.8CRITICAL

Key Information:

Vendor

SourceCodester
Status
Music Class Enrollment System
Vendor
CVE Published:
14 April 2025

What is CVE-2025-3589?

A SQL injection vulnerability has been identified in the Music Class Enrollment System 1.0 developed by SourceCodester. The flaw exists in the unknown function of the /manage_class.php file, where manipulation of the 'ID' argument may allow an attacker to execute arbitrary SQL queries. This can be exploited remotely, leading to unauthorized data access and potential data manipulation. With the exploit publicly disclosed, it emphasizes the urgency for users to secure their applications against such vulnerabilities to prevent possible attacks.

References

https://github.com/byxs0x0/SQL/blob/main/SQL6.md
https://github.com/byxs0x0/SQL/blob/main/SQL6.md
https://vuldb.com/?ctiid.304644

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2025-3589 : SQL Injection Vulnerability in SourceCodester Music Class Enrollment System