CVE-2025-9304: SourceCodester Online Bank Management System show.php sql injection
A weakness has been identified in SourceCodester Online Bank Management System 1.0. Impacted is an unknown function of the file /bank/show.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from a remote location. The exploit has been made available to the public and could be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9304?
CVE-2025-9304 is categorized as a high severity vulnerability due to its potential for SQL injection and remote exploitation.
What systems are affected by CVE-2025-9304?
CVE-2025-9304 affects version 1.0 of the SourceCodester Online Bank Management System.
How do I fix CVE-2025-9304?
To fix CVE-2025-9304, sanitize and validate user inputs for the ID argument in the /bank/show.php file to prevent SQL injection.
Can CVE-2025-9304 be exploited remotely?
Yes, CVE-2025-9304 can be exploited remotely by manipulating the ID argument.
What type of attack does CVE-2025-9304 involve?
CVE-2025-9304 involves an SQL injection attack due to improper handling of input in the Online Bank Management System.