CVE-2025-45956

High CVSS: 8.8

A SQL injection vulnerability in manage_damage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated attacker to execute arbitrary SQL commands via the "id" parameter

Vendor

Oretnom23

Product

Computer Laboratory Management System

CWE

CWE-89

Yayın Tarihi

2025-04-29 17:15:41

Güncelleme

2025-05-14 21:01:22

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-89 Computer Laboratory Management System HIGH Oretnom23 2025

Referanslar

https://github.com/lloydik/CLMS-vulnerabilities/blob/main/SQLi-CLMS-PoC.md https://github.com/lloydik/CLMS-vulnerabilities/blob/main/SQLi-CLMS-PoC.md

Benzer Kayıtlar

Medium

CVE-2026-30523

A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input vali…

Medium

CVE-2026-30522

A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validati…

Medium

CVE-2026-30521

A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validati…

Medium

CVE-2026-30520

A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0. The vulnerability is located i…

High

CVE-2026-30534

A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in admin/manage_category.php via…

Medium

CVE-2026-30527

A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Categ…