CVE-2025-13059: SourceCodester Alumni Management System manage_career.php sql injection
A weakness has been identified in SourceCodester Alumni Management System 1.0. The impacted element is an unknown function of the file /managecareer.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13059?
CVE-2025-13059 has been classified as a medium severity vulnerability due to its potential for SQL injection leading to remote exploitation.
How do I fix CVE-2025-13059?
To fix CVE-2025-13059, ensure that input parameters in the /manage_career.php file are properly sanitized and validated to prevent SQL injection.
What systems are affected by CVE-2025-13059?
CVE-2025-13059 affects the SourceCodester Alumni Management System version 1.0.
Can CVE-2025-13059 be exploited remotely?
Yes, CVE-2025-13059 allows for remote exploitation through manipulated arguments in the SQL query.
What type of vulnerability is CVE-2025-13059?
CVE-2025-13059 is a SQL injection vulnerability that occurs due to improper handling of input parameters.