CVE-2025-4467: SourceCodester Online Student Clearance System edit-admin.php sql injection
A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-admin.php. The manipulation of the argument id/txtfullname/txtemail/cmddesignation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4467?
CVE-2025-4467 has been declared as critical.
How does CVE-2025-4467 impact the SourceCodester Online Student Clearance System?
CVE-2025-4467 leads to SQL injection vulnerabilities due to improper handling of the txtfullname, txtemail, and cmddesignation arguments.
How do I fix CVE-2025-4467?
To fix CVE-2025-4467, ensure proper input validation and sanitation in the /admin/edit-admin.php file.
Which component is affected by CVE-2025-4467?
CVE-2025-4467 affects the /admin/edit-admin.php file of the SourceCodester Online Student Clearance System.
What type of vulnerability is CVE-2025-4467?
CVE-2025-4467 is a SQL injection vulnerability.