PT-2025-35614

CVE-2025-9833

·

Published

2025-09-02

·

Updated

2025-09-05

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions SourceCodester Online Farm Management System version 1.0
Description A SQL injection issue exists in the /Login/login.php file due to manipulation of the uname argument. This allows for remote exploitation. The exploit is publicly available.
Recommendations Sanitize the uname argument to prevent SQL injection attacks. Review and secure the code within the /Login/login.php file.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\'Injection\')
CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')
Related identifiers
CVE-2025-9833
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com