CVE-2025-6160: SourceCodester Client Database Management System user_customer_create_order.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /usercustomercreateorder.php. The manipulation of the argument userid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6160?
CVE-2025-6160 is classified as a critical vulnerability.
How does CVE-2025-6160 impact the SourceCodester Client Database Management System?
CVE-2025-6160 allows for SQL injection through manipulation of the user_id argument in the /user_customer_create_order.php file.
What are the consequences of exploiting CVE-2025-6160?
Exploitation of CVE-2025-6160 could lead to unauthorized access to sensitive data in the SourceCodester Client Database Management System.
How do I fix CVE-2025-6160?
To fix CVE-2025-6160, validate and sanitize all user inputs before processing them to prevent SQL injection.
Is there any workaround for CVE-2025-6160 until a patch is available?
A potential workaround for CVE-2025-6160 is to restrict access to the /user_customer_create_order.php file until proper validation measures can be implemented.