CVE-2025-10687: SourceCodester Responsive E-Learning System add_teacher.php sql injection
A vulnerability was found in SourceCodester Responsive E-Learning System 1.0. This affects an unknown part of the file /admin/addteacher.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10687?
CVE-2025-10687 has a critical severity level due to its potential for remote exploitation through SQL injection.
How do I fix CVE-2025-10687?
To fix CVE-2025-10687, sanitize and validate the Username input in the /admin/add_teacher.php file to prevent SQL injection.
What systems are affected by CVE-2025-10687?
CVE-2025-10687 affects version 1.0 of SourceCodester Responsive E-Learning System.
Can CVE-2025-10687 be exploited remotely?
Yes, CVE-2025-10687 can be exploited remotely by manipulating the Username parameter.
What is the nature of the vulnerability in CVE-2025-10687?
The nature of the vulnerability in CVE-2025-10687 is an SQL injection flaw that allows attackers to execute arbitrary SQL queries.