CVE-2025-13059

SourceCodester Alumni Management System manage_career.php sql injection

A weakness has been identified in SourceCodester Alumni Management System 1.0. The impacted element is an unknown function of the file /manage_career.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.

Affected

SourceCodester · Alumni Management System

CVSS v4.0 VULDB

2.1 LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 VULDB

6.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CVSS v2.0 VULDB

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

0.35% chance of exploitation in the next 30 days, 27th percentile

Published

2025-11-12

Updated

2025-11-14

Proof-of-concept exploits (1)

• CaseyW33/CVE/issues/10★ · 2025-10-26

Security advisories

• https://vuldb.com/?id.332186
• https://vuldb.com/?submit.682548
• https://www.sourcecodester.com

References

• CVE Record
• NVD entry

Related

• CVE-2025-13586