CVE-2025-9473: SourceCodester Online Bank Management System feedback.php sql injection
A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. This impacts an unknown function of the file /feedback.php. The manipulation of the argument msg leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9473?
CVE-2025-9473 is classified as a critical vulnerability due to its potential for SQL injection that could lead to unauthorized access to the database.
How do I fix CVE-2025-9473?
To fix CVE-2025-9473, sanitize and validate input parameters in the /feedback.php file to prevent SQL injection attacks.
What software is affected by CVE-2025-9473?
CVE-2025-9473 affects SourceCodester Online Bank Management System version 1.0.
Can CVE-2025-9473 be exploited remotely?
Yes, CVE-2025-9473 can be exploited remotely, allowing attackers to manipulate input and perform SQL injection.
What functions in the software are impacted by CVE-2025-9473?
CVE-2025-9473 impacts an unknown function in the /feedback.php file, which is vulnerable to SQL injection.