CNNVD-202509-3039 Information

CNNVD ID

CNNVD-202509-3039

CVE-2025-10626

  • CNNVD Published: 2025-09-18

Description (Chinese)

SourceCodester Online Exam Form Submission是SourceCodester开源的一个在线考试提交系统。 SourceCodester Online Exam Form Submission 1.0版本存在安全漏洞,该漏洞源于对文件/admin/update_s3.php中参数credits的错误操作,可能导致SQL注入攻击。

Description (English)

SourceCodester Online Exam Form Submission is an online examination submission system from the SourceCodester. The security loophole in version 1.0 of SourceCodester Online Exam Form Submission stems from a mishandling of the parameter credits in the document/admin/update s3.php, which could lead to an attack on SQL injection.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Sparkle Motion

Published

2025-09-18

Last Modified

2026-02-24

References

https://github.com/qcycop0101-hash/CVE/issues/25 https://vuldb.com/?ctiid.324656 https://vuldb.com/?id.324656 https://vuldb.com/?submit.650449 https://www.sourcecodester.com/

Share on: