CVE-2025-5369: SourceCodester PHP Display Username After Login login.php sql injection
A vulnerability classified as critical has been found in SourceCodester PHP Display Username After Login 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5369?
CVE-2025-5369 is classified as a critical severity vulnerability.
How can I fix CVE-2025-5369?
To fix CVE-2025-5369, sanitize inputs to prevent SQL injection vulnerabilities and update to a patched version of the software.
What component is affected by CVE-2025-5369?
CVE-2025-5369 affects the /login.php file in SourceCodester PHP Display Username After Login 1.0.
Is CVE-2025-5369 exploitable remotely?
Yes, CVE-2025-5369 is exploitable remotely, allowing attackers to execute SQL injection attacks.
What type of vulnerability is CVE-2025-5369?
CVE-2025-5369 is an SQL injection vulnerability caused by improper handling of the Username argument.