PT-2025-13580 · Unknown · Sourcecodester Online Exam System
CVE-2025-28087
·
Published
2025-03-28
·
Updated
2025-04-07
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Sourcecodester Online Exam System version 1.0
Description
The issue is related to SQL Injection via the dash.php file. This allows for potential exploitation.
Recommendations
For Sourcecodester Online Exam System version 1.0, consider restricting access to the dash.php file until a patch is available. As a temporary workaround, avoid using user-inputted data in SQL queries to minimize the risk of exploitation.
Exploit
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sourcecodester Online Exam System