CVE-2025-13560: SourceCodester Company Website CMS reset-password.php sql injection
A vulnerability was found in SourceCodester Company Website CMS 1.0. This affects an unknown part of the file /admin/reset-password.php. The manipulation of the argument email results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13560?
CVE-2025-13560 has been classified as a high severity vulnerability due to its potential for remote SQL injection.
How do I fix CVE-2025-13560?
To fix CVE-2025-13560, it is recommended to update the SourceCodester Website CMS to the latest version and sanitize all user inputs to prevent SQL injection.
Which systems are affected by CVE-2025-13560?
CVE-2025-13560 affects all installations of SourceCodester Company Website CMS 1.0.
What kind of attack can be executed using CVE-2025-13560?
An attacker can launch a remote SQL injection attack through the email parameter in the /admin/reset-password.php file.
Has CVE-2025-13560 been disclosed publicly?
Yes, CVE-2025-13560 has been publicly disclosed and is actively being exploited.