CVE-2025-13264: SourceCodester Online Magazine Management System view_magazine.php sql injection

Published Nov 17, 2025

Updated

A security flaw has been discovered in SourceCodester Online Magazine Management System 1.0. This affects an unknown part of the file /viewmagazine.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be exploited.

Affected Software

2 affected components

Sourcecodester Online Magazine Management System

oretnom23 Online Magazine Management System=1.0

Event History

Nov 17, 2025

CVE Published

via MITRE·05:02 AM

Data Sourced

via MITRE·05:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:16 AM

DescriptionSeverityWeaknessAffected Software

Sep 11, 58737

Event

via NVD·10:56 PM

Frequently Asked Questions

What is the severity of CVE-2025-13264?

CVE-2025-13264 is classified as a high severity vulnerability due to the potential for remote SQL injection attacks.

How do I fix CVE-2025-13264?

To fix CVE-2025-13264, it is recommended to sanitize and validate the input parameter 'ID' to prevent SQL injection.

What systems are affected by CVE-2025-13264?

CVE-2025-13264 affects SourceCodester Online Magazine Management System version 1.0.

Can CVE-2025-13264 be exploited remotely?

Yes, CVE-2025-13264 can be exploited remotely by manipulating the 'ID' parameter.

What type of vulnerability is CVE-2025-13264?

CVE-2025-13264 is a SQL injection vulnerability that allows an attacker to execute arbitrary SQL code.