CNNVD-202509-2621 Information

CNNVD ID

CNNVD-202509-2621

CVE-2025-10625

  • CNNVD Published: 2025-09-17

Description (Chinese)

SourceCodester Online Exam Form Submission是SourceCodester开源的一个在线考试提交系统。 SourceCodester Online Exam Form Submission 1.0版本存在SQL注入漏洞,该漏洞源于对文件/user/dashboard.php中参数phone的错误操作,可能导致SQL注入攻击。

Description (English)

SourceCodester Online Exam Form Submission is an online examination submission system from the SourceCodester. The sourceCodester Online Exam Form Submission 1.0 has an injection loophole in SQL, which stems from an error in the phone of the parameter in the document/user/dashboard.php, which could lead to an SQL injection attack.

Hazard Level

High

Vulnerability Type

SQL注入

Affected Vendor

Sparkle Motion

Published

2025-09-17

Last Modified

2026-02-24

References

https://github.com/qcycop0101-hash/CVE/issues/24 https://vuldb.com/?ctiid.324655 https://vuldb.com/?id.324655 https://vuldb.com/?submit.650444 https://www.sourcecodester.com/

Share on: