CVE-2025-45956: SQL Injection
Published Apr 29, 2025
·Updated
A SQL injection vulnerability in managedamage.php in Sourcecodester Computer Laboratory Management System v1.0 allows an authenticated attacker to execute arbitrary SQL commands via the "id" parameter
Affected Software
2 affected components
Sourcecodester Computer Laboratory Management System
oretnom23 Computer Laboratory Management System=1.0
Event History
Apr 29, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Oct 7, 57345
Event
via FIRST·08:57 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-45956?
CVE-2025-45956 is classified as a high severity SQL injection vulnerability.
2
How do I fix CVE-2025-45956?
To fix CVE-2025-45956, sanitize and validate all user inputs, particularly the 'id' parameter in manage_damage.php.
3
Who is affected by CVE-2025-45956?
The vulnerability affects users of Sourcecodester Computer Laboratory Management System v1.0.
4
What are the potential impacts of CVE-2025-45956?
CVE-2025-45956 allows an authenticated attacker to execute arbitrary SQL commands, leading to data manipulation or exposure.
5
Is CVE-2025-45956 exploitable remotely?
Exploitation of CVE-2025-45956 requires authentication, making it less accessible to unauthenticated users.