CVE-2025-10481
📋 TL;DR
This SQL injection vulnerability in SourceCodester Online Student File Management System 1.0 allows attackers to manipulate database queries through the /remove_file.php endpoint. Remote attackers can potentially access, modify, or delete sensitive student data. All deployments of version 1.0 are affected.
💻 Affected Systems
- SourceCodester Online Student File Management System
📦 What is this software?
⚠️ Risk & Real-World Impact
Worst Case
Complete database compromise leading to data theft, data destruction, or remote code execution via database functions
Likely Case
Unauthorized access to sensitive student records, file metadata, and potentially administrative credentials
If Mitigated
Limited impact with proper input validation and database permissions restricting query execution
🎯 Exploit Status
Exploit requires authentication to access /remove_file.php endpoint
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Not available
Vendor Advisory: https://www.sourcecodester.com/
Restart Required: No
Instructions:
No official patch available. Consider upgrading to a newer version if available or implementing workarounds.
🔧 Temporary Workarounds
Input Validation and Parameterized Queries
PHPImplement proper input validation and use parameterized queries in /remove_file.php
Modify remove_file.php to use prepared statements: $stmt = $conn->prepare('DELETE FROM files WHERE id = ?'); $stmt->bind_param('i', $_POST['ID']);
Web Application Firewall Rules
allDeploy WAF rules to block SQL injection patterns targeting /remove_file.php
Add WAF rule: Block requests to /remove_file.php containing SQL keywords like UNION, SELECT, INSERT, DELETE, DROP
🧯 If You Can't Patch
- Restrict access to /remove_file.php endpoint using IP whitelisting
- Implement database user with minimal permissions (read-only where possible)
🔍 How to Verify
Check if Vulnerable:
Test /remove_file.php endpoint with SQL injection payloads like: ID=1' OR '1'='1Check Version:
Check system version in admin panel or readme filesVerify Fix Applied:
Verify that parameterized queries are implemented and SQL injection attempts return errors without executing📡 Detection & Monitoring
Log Indicators:
- Multiple failed SQL queries in application logs
- Unusual database access patterns from web server IP
Network Indicators:
- HTTP POST requests to /remove_file.php containing SQL keywords
- Abnormal response sizes from database queries
SIEM Query:
source="web_logs" AND uri="/remove_file.php" AND (message="*UNION*" OR message="*SELECT*" OR message="*INSERT*")