CVE-2025-5207: SourceCodester Client Database Management System superadmin_update_profile.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. Affected by this issue is some unknown functionality of the file /superadminupdateprofile.php. The manipulation of the argument nickname/email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5207?
CVE-2025-5207 is classified as a critical vulnerability.
What type of vulnerability is CVE-2025-5207?
CVE-2025-5207 is a SQL injection vulnerability affecting the SourceCodester Client Database Management System.
How can CVE-2025-5207 be exploited?
CVE-2025-5207 can be exploited by manipulating the argument nickname/email in the /superadmin_update_profile.php file.
What is the impact of CVE-2025-5207?
The impact of CVE-2025-5207 can lead to unauthorized access to the database and potential data manipulation.
How do I fix CVE-2025-5207?
To fix CVE-2025-5207, ensure proper input validation and parameterized queries to prevent SQL injection.