CVE-2025-12939: SourceCodester Interview Management System addCandidate.php sql injection
A security flaw has been discovered in SourceCodester Interview Management System up to 1.0. Affected by this issue is some unknown functionality of the file /addCandidate.php. The manipulation of the argument candName results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12939?
CVE-2025-12939 is classified as a critical vulnerability due to its potential for remote SQL injection.
How do I fix CVE-2025-12939?
To fix CVE-2025-12939, sanitize and validate user inputs for the candName argument in the /addCandidate.php file.
What systems are affected by CVE-2025-12939?
CVE-2025-12939 affects SourceCodester Interview Management System versions up to and including 1.0.
What kind of attack is possible with CVE-2025-12939?
CVE-2025-12939 allows for remote SQL injection attacks, which can compromise the database.
Is there a known exploit for CVE-2025-12939?
Yes, there are known exploitation techniques targeting the SQL injection vulnerability in CVE-2025-12939.