CVE-2025-10596

The CVE-2025-10596 entry pertains to SourceCodester Online Exam Form Submission 1.0, where the usn parameter in /index.php is vulnerable to SQL injection. The issue is exploitable remotely and has been published publicly, indicating potential in-the-wild use. Affected component: /index.php; root ...

CVE-2025-10602

The CVE-2025-10602 vulnerability affects SourceCodester Online Exam Form Submission 1.0. The issue arises in the /admin/delete_s1.php handler, where manipulating the ID parameter enables SQL injection. Exploitation can be conducted remotely, and public exploit details exist. Impact is described a...

CVE-2025-10625

The CVE-2025-10625 entry concerns SourceCodester Online Exam Form Submission 1.0. A SQL injection vulnerability exists in the /user/dashboard.php?page=update_profile handler, triggered by manipulating the phone parameter (and potentially other parameters). The vulnerability is exploitable remotel...

CVE-2025-10600

CVE-2025-10600 affects SourceCodester Online Exam Form Submission 1.0, specifically the /register.php endpoint where manipulation of the img parameter enables unrestricted file uploads. The connected documents confirm remote exploitation with an exploit published, indicating an attacker could upl...

CVE-2025-10601

CVE-2025-10601 concerns SourceCodester Online Exam Form Submission 1.0. A SQL injection vulnerability arises from manipulating the email parameter in an unknown function of /admin/index.php, enabling remote exploitation. Public exploit details exist. Related advisories (e.g., PT-2025-38225) sugge...

CVE-2025-10627

The CVE-2025-10627 entry concerns SourceCodester Online Exam Form Submission 1.0. A SQL injection vulnerability exists in the /admin/delete_user.php endpoint caused by manipulation of the ID parameter. The flaw can be exercised remotely, and exploits have been disclosed publicly. Multiple connect...

CVE-2025-10626

CVE-2025-10626 affects SourceCodester Online Exam Form Submission 1.0. A flaw in the file /admin/update_s3.php allows manipulation of the credits parameter, causing a SQL injection. Remote exploitation is possible, and the exploit has been published. Connected sources corroborate the SQL injectio...