CVE-2025-3119: SourceCodester Online Tutor Portal manage_course.php sql injection
A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /tutor/courses/managecourse.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3119?
CVE-2025-3119 has been declared as a critical severity vulnerability.
What kind of vulnerability is CVE-2025-3119?
CVE-2025-3119 is a SQL injection vulnerability affecting the manage_course.php file.
How can CVE-2025-3119 be exploited?
CVE-2025-3119 can be exploited remotely by manipulating the ID argument in the affected file.
What software is affected by CVE-2025-3119?
CVE-2025-3119 affects SourceCodester Online Tutor Portal version 1.0.
How do I fix CVE-2025-3119?
To fix CVE-2025-3119, it is recommended to validate user input and use parameterized queries to prevent SQL injection.