CVE-2025-46188

Published May 9, 2025

Last updated 2 months ago

SourceCodester

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-46188 affects SourceCodester Client Database Management System 1.0. The vulnerability is due to SQL Injection in superadmin_phpmyadmin.php. This CVE record was published to the CVE List and included within the NVD dataset on May 9, 2025. References for advisories, solutions, and tools are provided by NIST. The CVE list provides common identifiers for publicly known cybersecurity vulnerabilities.

Description: SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadmin_phpmyadmin.php.
Source: cve@mitre.org
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Secondary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-89

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:lerouxyxchire:client_database_management_system:1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DFE80DE6-C79F-452F-9523-4EC1F9777DA4"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.