CVE-2025-10596: SourceCodester Online Exam Form Submission index.php sql injection

Published Sep 17, 2025

Updated

A vulnerability was found in SourceCodester Online Exam Form Submission 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument usn results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.

Affected Software

2 affected components

Sourcecodester Online Exam Form Submission

Janobe Online Exam Form Submission=1.0

Event History

Sep 17, 2025

CVE Published

via MITRE·03:02 PM

Data Sourced

via MITRE·03:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Feb 4, 58705

Event

via NVD·12:23 PM

Frequently Asked Questions

What is the severity of CVE-2025-10596?

CVE-2025-10596 has been classified with a high severity level due to its potential for SQL injection attacks.

How do I fix CVE-2025-10596?

To fix CVE-2025-10596, developers should sanitize and validate input data before processing it in the SQL query.

What systems are affected by CVE-2025-10596?

CVE-2025-10596 affects SourceCodester Online Exam Form Submission version 1.0.

Can CVE-2025-10596 be exploited remotely?

Yes, CVE-2025-10596 can be exploited remotely, allowing attackers to manipulate SQL queries.

What impact does CVE-2025-10596 have on data security?

CVE-2025-10596 can lead to unauthorized access to sensitive data within the database.