CVE-2025-9759: Campcodes/SourceCodester Courier Management System ajax.php signup sql injection
A security flaw has been discovered in Campcodes/SourceCodester Courier Management System 1.0. Affected by this issue is the function Signup of the file /ajax.php. Performing manipulation of the argument lastname results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9759?
CVE-2025-9759 is a critical vulnerability that allows SQL injection in the Campcodes Courier Management System.
How do I fix CVE-2025-9759?
To fix CVE-2025-9759, validate and sanitize the input for the lastname argument in the Signup function of /ajax.php.
What systems are affected by CVE-2025-9759?
CVE-2025-9759 affects the Campcodes/SourceCodester Courier Management System version 1.0.
What type of vulnerability is CVE-2025-9759?
CVE-2025-9759 is classified as an SQL injection vulnerability that enables remote code execution.
Can CVE-2025-9759 be exploited remotely?
Yes, CVE-2025-9759 can be exploited remotely by manipulating the lastname argument during the signup process.