CVE Details
Basic Information
| Title | SourceCodester Simple Company Website manage.php sql injection |
|---|---|
| Type | cve |
| Published | 2025-06-29T18:32:05.966Z |
| Last Seen |
Product Information
| Vendor | SourceCodester |
|---|---|
| Product | Simple Company Website |
| Version | 1.0 |
CVSS Information
| Base Score | 5.1 (MEDIUM) |
|---|---|
| Attack Vector | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P |
| Confidentiality Impact | |
| Integrity Impact | |
| Availability Impact |
AI Analysis
| AI Description | A SQL injection vulnerability exists in the manage.php file of SourceCodester’s Simple Company Website 1.0. This allows remote attackers to inject malicious SQL code by manipulating the ID argument. The vulnerability is considered critical and has a public exploit available. |
|---|---|
| AI Severity | Medium |
| Vendor | SourceCodester |
| Product | Simple Company Website |
| Affected Version | 1.0 |
Affected Products
- SourceCodester Simple Company Website 1.0
Additional Information
| CVE List | |
|---|---|
| CWE List | CWE-89, CWE-74 |
| Bulletin Family |
References
Description
A vulnerability was found in SourceCodester Simple Company Website 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/services/manage.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.