CVE-2025-12929: SourceCodester Survey Application System LoginRegistration.php update_user sql injection
A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function saveuser/updateuser of the file /LoginRegistration.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. Other parameters might be affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12929?
CVE-2025-12929 is classified with a medium severity rating due to the potential for SQL injection vulnerabilities.
How do I fix CVE-2025-12929?
To fix CVE-2025-12929, sanitize and validate the input for the fullname argument in the save_user/update_user functions.
What software is affected by CVE-2025-12929?
CVE-2025-12929 affects SourceCodester Survey Application System version 1.0.
Can CVE-2025-12929 be exploited remotely?
Yes, CVE-2025-12929 can be exploited remotely, allowing attackers to execute SQL injection attacks.
What is the potential impact of exploiting CVE-2025-12929?
Exploiting CVE-2025-12929 can lead to unauthorized access to sensitive data in the database through SQL injection.