CVE-2025-46188

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadmin_phpmyadmin.php.

CVSS v3.1 CNA

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.67% chance of exploitation in the next 30 days, 51st percentile

Published

2025-05-09

Updated

2025-05-10

Proof-of-concept exploits (1)

• https://medium.com/@bijay.kumar1857/sql-injection-to-rce-exploitation-0a5048e592be

Security advisories

• x6vrn/mitre/blob/main/CVE-2025-46188.md

References

• CVE Record
• NVD entry