CVE-2025-2601: SourceCodester Kortex Lite Advocate Office Management System activate_reg.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. This affects an unknown part of the file activatereg.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2601?
CVE-2025-2601 is classified as a critical severity vulnerability due to its SQL injection potential.
How does CVE-2025-2601 affect the Kortex Lite Advocate Office Management System?
CVE-2025-2601 affects the activate_reg.php file, leading to potential SQL injection attacks.
What is the exploit vector for CVE-2025-2601?
The exploit vector for CVE-2025-2601 involves manipulating the 'ID' parameter in the activate_reg.php file.
Can CVE-2025-2601 be exploited remotely?
Yes, CVE-2025-2601 can be exploited remotely if an attacker has access to the affected endpoint.
How can I mitigate CVE-2025-2601?
Mitigation for CVE-2025-2601 involves sanitizing user inputs and implementing prepared statements to prevent SQL injection.