CVE-2025-10602: SourceCodester Online Exam Form Submission delete_s1.php sql injection

Published Sep 17, 2025

Updated

A vulnerability was found in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deletes1.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.

Affected Software

2 affected components

Sourcecodester Online Exam Form Submission

Janobe Online Exam Form Submission=1.0

Event History

Sep 17, 2025

CVE Published

via MITRE·05:02 PM

Data Sourced

via MITRE·05:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeaknessAffected Software

Feb 4, 58705

Event

via NVD·07:59 AM

Frequently Asked Questions

What is the severity of CVE-2025-10602?

CVE-2025-10602 is classified as a high severity SQL injection vulnerability.

How do I fix CVE-2025-10602?

To fix CVE-2025-10602, ensure proper parameterized queries and input validation are implemented in the affected file /admin/delete_s1.php.

What systems are affected by CVE-2025-10602?

CVE-2025-10602 specifically affects SourceCodester Online Exam Form Submission version 1.0.

Can CVE-2025-10602 be exploited remotely?

Yes, CVE-2025-10602 can be exploited remotely through SQL injection.

What are the potential impacts of CVE-2025-10602?

The exploitation of CVE-2025-10602 can lead to unauthorized data access, data manipulation, or system compromise.