CVE-2025-28087

Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php

Critical · published March 28, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
41.6
In the wild
Unconfirmed
What it is

🚨 An SQL Injection vulnerability in Sourcecodester Online Exam System 1.0 is a serious threat, allowing attackers to access sensitive data through dash.php! 🔥 Think of this as a sneaky exam invigilator who can peek at all the answers just by asking the right questions. If an attacker exploits this flaw, they could gain unauthorized access to the database like a student sneaking a look at the answer sheet! The consequences are absolutely devastating! An attacker could manipulate the database, extracting personal information, altering exam results, or even deleting critical records. It's a full-blown data breach waiting to happen, all thanks to a line of malicious code!

Put simply

Think of this as a sneaky exam invigilator who can peek at all the answers just by asking the right questions. If an attacker exploits this flaw, they could gain unauthorized access to the database like a student sneaking a look at the answer sheet! This SQL Injection vulnerability in dash.php allows attackers to alter SQL queries, potentially leading to unauthorized access to the database and its contents.

What to do

The consequences are absolutely devastating! An attacker could manipulate the database, extracting personal information, altering exam results, or even deleting critical records. It's a full-blown data breach waiting to happen, all thanks to a line of malicious code! To protect yourself, patch to the latest version of Sourcecodester immediately, and ensure all input data is properly sanitized and validated. Implement prepared statements to tighten your defenses against these crafty SQL attacks! You've got this! Follow these steps to secure your system and keep the mischief-makers at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00496 · 41.6th percentile
Published
2025-03-28T00:00Z
EPSS history
Timeline
  • 28 MAR 00:00Z
    Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php
    cvelistv5