CVE-2025-9757: Campcodes/SourceCodester Courier Management System ajax.php login sql injection
Published Sep 1, 2025
·Updated
A vulnerability was determined in Campcodes/SourceCodester Courier Management System 1.0. Affected is the function Login of the file /ajax.php. This manipulation of the argument email causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
2 affected components
Campcodes SourceCodester Courier Management System
Campcodes Courier Management System=1.0
Event History
Sep 1, 2025
CVE Published
via MITRE·02:32 AM
Data Sourced
via MITRE·02:32 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeaknessAffected Software
Feb 27, 57989
Event
via FIRST·10:01 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-9757?
CVE-2025-9757 is classified as a critical vulnerability due to its potential for SQL injection.
2
How do I fix CVE-2025-9757?
To fix CVE-2025-9757, sanitize input data in the login function to prevent SQL injection attacks.
3
What type of vulnerability is CVE-2025-9757?
CVE-2025-9757 is an SQL injection vulnerability that can be exploited remotely.
4
Which software is affected by CVE-2025-9757?
CVE-2025-9757 affects Campcodes/SourceCodester Courier Management System 1.0.
5
Can CVE-2025-9757 be exploited by unauthenticated users?
Yes, CVE-2025-9757 can be exploited remotely by unauthenticated users.