CVE-2025-46192: SQL Injection
Published May 9, 2025
·Updated
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userpaymentupdate.php via the orderid POST parameter.
Affected Software
2 affected components
Sourcecodester Client Database Management System
Lerouxyxchire Client Database Management System=1.0
Event History
May 9, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-46192?
CVE-2025-46192 has a medium severity level due to its potential for unauthorized access through SQL injection.
2
How do I fix CVE-2025-46192?
To fix CVE-2025-46192, ensure to validate and sanitize all user inputs, particularly the order_id parameter in user_payment_update.php.
3
What kind of attack can exploit CVE-2025-46192?
CVE-2025-46192 can be exploited using SQL injection attacks, allowing attackers to execute arbitrary SQL code on the database.
4
Which software versions are affected by CVE-2025-46192?
CVE-2025-46192 affects SourceCodester Client Database Management System version 1.0.
5
Is CVE-2025-46192 easy to exploit?
Yes, CVE-2025-46192 is relatively easy to exploit for attackers familiar with SQL injection techniques.