CVE-2025-13297: itsourcecode Web-Based Internet Laboratory Management System controller.php sql injection
A security vulnerability has been detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. The impacted element is an unknown function of the file /course/controller.php. Such manipulation leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13297?
CVE-2025-13297 has been classified as a high severity vulnerability due to its potential for remote exploitation through SQL injection.
How do I fix CVE-2025-13297?
To fix CVE-2025-13297, ensure proper input validation and use parameterized queries to prevent SQL injection in the affected file /course/controller.php.
What systems are impacted by CVE-2025-13297?
CVE-2025-13297 affects the itsourcecode Web-Based Internet Laboratory Management System version 1.0.
Can CVE-2025-13297 be exploited remotely?
Yes, CVE-2025-13297 can be exploited remotely since it involves SQL injection vulnerabilities.
What type of vulnerability is CVE-2025-13297?
CVE-2025-13297 is classified as an SQL injection vulnerability due to improper handling of user input.