CVE-2025-2655: SourceCodester AC Repair and Services System Users.php save_users sql injection
First published: Sun Mar 23 2025(Updated: )
A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been declared as critical. This vulnerability affects the function save_users of the file /classes/Users.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| AC Repair and Services System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-2655?
CVE-2025-2655 has been declared as critical due to its potential for SQL injection.
How does CVE-2025-2655 affect the SourceCodester AC Repair and Services System?
CVE-2025-2655 affects the save_users function in the /classes/Users.php file, allowing for SQL injection through manipulated parameters.
What are the potential consequences of exploiting CVE-2025-2655?
Exploiting CVE-2025-2655 could allow attackers to access, modify, or delete sensitive data in the SourceCodester AC Repair and Services System database.
How do I fix CVE-2025-2655?
To fix CVE-2025-2655, review and sanitize all inputs to the save_users function, implementing prepared statements to mitigate SQL injection risks.
What versions of software are affected by CVE-2025-2655?
CVE-2025-2655 affects SourceCodester AC Repair and Services System version 1.0.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/severity
- agent/last-modified-date
- agent/author
- agent/event
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- collector/epss-latest
- source/FIRST
- agent/source
- agent/tags
- agent/epss
- vendor/sourcecodester
- canonical/ac repair and services system