CVE-2025-8989: SourceCodester COVID 19 Testing Management System edit-phlebotomist.php sql injection
A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. This issue affects some unknown processing of the file /edit-phlebotomist.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8989?
CVE-2025-8989 is classified as a critical vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2025-8989?
To fix CVE-2025-8989, validate and sanitize all user inputs, especially in the mobilenumber argument, to prevent SQL injection.
What systems are affected by CVE-2025-8989?
CVE-2025-8989 affects SourceCodester COVID 19 Testing Management System version 1.0.
Can CVE-2025-8989 be exploited remotely?
Yes, CVE-2025-8989 can be exploited remotely by manipulating the mobilenumber parameter.
What are the potential impacts of CVE-2025-8989?
The potential impacts of CVE-2025-8989 include unauthorized access to the database and potential data manipulation.