CVE-2025-0294: SourceCodester Home Clean Services Management System process.php sql injection
First published: Tue Jan 07 2025(Updated: )
A vulnerability has been found in SourceCodester Home Clean Services Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /public_html/admin/process.php. The manipulation of the argument type/length/business leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Home Clean Services Management System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-0294?
CVE-2025-0294 is classified as a critical vulnerability.
What are the affected components of CVE-2025-0294?
CVE-2025-0294 affects the file /public_html/admin/process.php in SourceCodester Home Clean Services Management System 1.0.
How can I mitigate CVE-2025-0294?
To mitigate CVE-2025-0294, ensure that you validate and sanitize all user inputs to the process.php file.
Is there a patch available for CVE-2025-0294?
As of now, no official patch has been released for CVE-2025-0294; monitor for updates from the vendor.
What type of attacks can CVE-2025-0294 lead to?
CVE-2025-0294 can lead to unauthorized access or manipulation of data due to improper handling of arguments in the affected functionality.
- agent/weakness
- agent/title
- agent/references
- agent/first-publish-date
- agent/type
- agent/description
- agent/severity
- agent/author
- agent/event
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/softwarecombine
- agent/tags
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/sourcecodester
- canonical/home clean services management system