CVE-2025-46188

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadmin_phpmyadmin.php

Critical · published May 9, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
51.4
In the wild
Unconfirmed
What it is

🚨 An SQL Injection vulnerability lurks in SourceCodester Client Database Management System 1.0, and it’s ready to pounce! Think of it as a restaurant where an unchecked customer can rewrite the menu — with a little crafty input, they can order anything they want in the kitchen! 🍽️ An attacker could maliciously inject SQL commands, allowing them to access sensitive data, modify records, or even wipe the entire database clean—a potential nightmare that could lead to devastating data breaches! 🔥 Imagine all your confidential client information suddenly up for grabs!

Put simply

Think of it as a restaurant where an unchecked customer can rewrite the menu — with a little crafty input, they can order anything they want in the kitchen! 🍽️ This SQL Injection vulnerability in `superadmin_phpmyadmin.php` can be exploited due to insufficient input validation, letting attackers manipulate database queries by injecting their own code.

What to do

An attacker could maliciously inject SQL commands, allowing them to access sensitive data, modify records, or even wipe the entire database clean—a potential nightmare that could lead to devastating data breaches! 🔥 Imagine all your confidential client information suddenly up for grabs! Immediately patch to the latest version of SourceCodester Client Database Management System that addresses this vulnerability. Additionally, implement prepared statements and parameterized queries to bolster your defenses against SQL injection attacks. 🛡️ You've got this! By taking these steps, you're on your way to securing your systems like a pro! 🚀

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00671 · 51.4th percentile
Published
2025-05-09T00:00Z
EPSS history
Timeline
  • 09 MAY 00:00Z
    SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadmin_phpmyadmin.php
    cvelistv5