CVE-2025-10625: SourceCodester Online Exam Form Submission dashboard.php sql injection

Published Sep 17, 2025

Updated

A vulnerability was detected in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /user/dashboard.php?page=updateprofile. The manipulation of the argument phone results in sql injection. The attack may be launched remotely. The exploit is now public and may be used. Other parameters might be affected as well.

Affected Software

2 affected components

Sourcecodester Online Exam Form Submission

Janobe Online Exam Form Submission=1.0

Event History

Sep 17, 2025

CVE Published

via MITRE·11:02 PM

Data Sourced

via MITRE·11:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·11:15 PM

DescriptionSeverityWeaknessAffected Software

Feb 5, 58705

Event

via NVD·11:19 AM

Frequently Asked Questions

What is the severity of CVE-2025-10625?

The severity of CVE-2025-10625 is critical due to the SQL injection vulnerability that can lead to unauthorized access to the database.

How do I fix CVE-2025-10625?

To fix CVE-2025-10625, validate and sanitize user inputs on the /user/dashboard.php?page=update_profile endpoint to prevent SQL injection.

What software is affected by CVE-2025-10625?

CVE-2025-10625 affects SourceCodester Online Exam Form Submission version 1.0.

What type of attack can be executed through CVE-2025-10625?

An attacker can launch an SQL injection attack through the phone argument on the /user/dashboard.php?page=update_profile file.

Can CVE-2025-10625 lead to data leakage?

Yes, CVE-2025-10625 can potentially lead to data leakage as an attacker may retrieve sensitive information from the database.