CVE-2025-6867: SourceCodester Simple Company Website manage.php sql injection
A vulnerability was found in SourceCodester Simple Company Website 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/services/manage.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6867?
CVE-2025-6867 is classified as a critical vulnerability.
How does CVE-2025-6867 affect the Simple Company Website?
CVE-2025-6867 affects the processing of the admin management file, specifically leading to SQL injection due to inadequate handling of the ID argument.
Can CVE-2025-6867 be exploited remotely?
Yes, CVE-2025-6867 can be exploited remotely, allowing attackers to perform SQL injection attacks.
What file is vulnerable in CVE-2025-6867?
The vulnerable file in CVE-2025-6867 is /admin/services/manage.php.
How can I mitigate the risks of CVE-2025-6867?
To mitigate CVE-2025-6867, ensure that the application properly sanitizes and validates all user inputs, especially those related to database queries.