CVE-2025-10833: 1000projects Bookstore Management System login.php sql injection
A vulnerability was determined in 1000projects Bookstore Management System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument unm causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10833?
CVE-2025-10833 has a high severity rating due to the potential for SQL injection attacks.
How do I fix CVE-2025-10833?
To mitigate CVE-2025-10833, sanitize and validate all user inputs in the /login.php file to prevent SQL injection.
What are the potential impacts of CVE-2025-10833?
Exploitation of CVE-2025-10833 can lead to unauthorized database access and data leakage.
Who is affected by CVE-2025-10833?
CVE-2025-10833 affects users of the 1000projects Bookstore Management System 1.0.
Is CVE-2025-10833 remotely exploitable?
Yes, CVE-2025-10833 can be exploited remotely, allowing attackers to perform SQL injection attacks.