CVE-2025-9704: SourceCodester Water Billing System viewbill.php sql injection
A security flaw has been discovered in SourceCodester Water Billing System 1.0. This impacts an unknown function of the file /viewbill.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9704?
CVE-2025-9704 is classified as a medium severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2025-9704?
To fix CVE-2025-9704, validate and sanitize all user inputs to prevent SQL injection, and apply security patches provided by the vendor.
What systems are affected by CVE-2025-9704?
CVE-2025-9704 affects SourceCodester Water Billing System version 1.0.
Can CVE-2025-9704 be exploited remotely?
Yes, CVE-2025-9704 can be exploited remotely, allowing attackers to perform SQL injection attacks.
What is the impact of exploiting CVE-2025-9704?
Exploiting CVE-2025-9704 can lead to unauthorized access to the database, data manipulation, and potential data breaches.