CVE-2025-4314: SourceCodester Advanced Web Store index.php sql injection
A vulnerability has been found in SourceCodester Advanced Web Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument txtLogin leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4314?
CVE-2025-4314 is classified as a critical severity vulnerability.
How does CVE-2025-4314 affect users?
CVE-2025-4314 allows for SQL injection through the manipulation of the txtLogin argument in the /admin/index.php file.
What versions of Advanced Web Store are affected by CVE-2025-4314?
All versions of SourceCodester Advanced Web Store 1.0 are affected by CVE-2025-4314.
How can I exploit CVE-2025-4314?
CVE-2025-4314 can be exploited by launching an SQL injection attack targeting the /admin/index.php file with crafted login attempts.
How do I fix CVE-2025-4314?
To fix CVE-2025-4314, ensure that input validation and parameterized queries are implemented in the affected file.