CVE-2025-10419
📋 TL;DR
This SQL injection vulnerability in SourceCodester Student Grading System 1.0 allows attackers to manipulate database queries through the 'sy' parameter in /del_promote.php. Attackers can potentially read, modify, or delete sensitive student grading data. The vulnerability affects all deployments of this specific software version.
💻 Affected Systems
- SourceCodester Student Grading System
📦 What is this software?
⚠️ Risk & Real-World Impact
Worst Case
Complete database compromise leading to data theft, data manipulation, or system takeover via SQL injection to execute arbitrary commands.
Likely Case
Unauthorized access to sensitive student records, grade manipulation, or extraction of database credentials.
If Mitigated
Limited impact if proper input validation and parameterized queries are implemented.
🎯 Exploit Status
Exploit details are publicly available on GitHub, making this easily exploitable by attackers with basic SQL injection knowledge.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Unknown
Vendor Advisory: https://www.sourcecodester.com/
Restart Required: No
Instructions:
1. Check vendor website for updated version. 2. If available, download and install the patched version. 3. Replace vulnerable /del_promote.php file with patched version.
🔧 Temporary Workarounds
Input Validation and Sanitization
allImplement strict input validation for the 'sy' parameter to only accept expected values.
Web Application Firewall (WAF)
allDeploy WAF rules to block SQL injection patterns targeting /del_promote.php.
🧯 If You Can't Patch
- Restrict access to /del_promote.php using authentication and authorization controls.
- Implement network segmentation to isolate the grading system from sensitive databases.
🔍 How to Verify
Check if Vulnerable:
Test /del_promote.php endpoint with SQL injection payloads in the 'sy' parameter.Check Version:
Check software version in admin panel or configuration files.Verify Fix Applied:
Verify that SQL injection attempts no longer succeed and that input validation is properly implemented.📡 Detection & Monitoring
Log Indicators:
- Unusual SQL queries in application logs
- Multiple failed login attempts followed by /del_promote.php access
Network Indicators:
- SQL injection patterns in HTTP requests to /del_promote.php
SIEM Query:
source="web_logs" AND uri="/del_promote.php" AND (request LIKE "%sy=%' OR%" OR request LIKE "%sy=%--%" OR request LIKE "%sy=%/*%*")