CVE-2025-3589: SourceCodester Music Class Enrollment System manage_class.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Music Class Enrollment System 1.0. Affected is an unknown function of the file /manageclass.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3589?
The severity of CVE-2025-3589 is classified as critical.
What is the impact of CVE-2025-3589?
CVE-2025-3589 allows for SQL injection, which can lead to unauthorized data access and manipulation.
How do I fix CVE-2025-3589?
To fix CVE-2025-3589, validate and sanitize the input parameters to the affected function in /manage_class.php.
Can CVE-2025-3589 be exploited remotely?
Yes, CVE-2025-3589 can be exploited remotely, making it a significant risk for exposed servers.
Which software versions are affected by CVE-2025-3589?
CVE-2025-3589 affects SourceCodester Music Class Enrollment System version 1.0.