SQL Injection Vulnerability in SourceCodester Music Class Enrollment System
CVE-2025-3589
9.8CRITICAL
Key Information:
- Vendor
- SourceCodester
- Vendor
- CVE Published:
- 14 April 2025
Summary
A SQL injection vulnerability has been identified in the Music Class Enrollment System 1.0 developed by SourceCodester. The flaw exists in the unknown function of the /manage_class.php file, where manipulation of the 'ID' argument may allow an attacker to execute arbitrary SQL queries. This can be exploited remotely, leading to unauthorized data access and potential data manipulation. With the exploit publicly disclosed, it emphasizes the urgency for users to secure their applications against such vulnerabilities to prevent possible attacks.
References
CVSS V3.1
Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published