CVE-2025-46189

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0

Description The software is susceptible to a SQL Injection issue in the 'user order customer update.php' file. The issue occurs through the order id POST parameter. Exploitation of this issue could allow an attacker to inject malicious SQL code, potentially leading to unauthorized access to or modification of the database. The API endpoint involved is 'user order customer update.php'. The vulnerable parameter is order id.

Recommendations SourceCodester Client Database Management System version 1.0: Sanitize or validate the order id POST parameter in the 'user order customer update.php' file to prevent SQL Injection attacks.