CVE-2025-10482
📋 TL;DR
This SQL injection vulnerability in SourceCodester Online Student File Management System 1.0 allows attackers to execute arbitrary SQL commands via the Username parameter in /admin/index.php. Attackers can potentially access, modify, or delete database contents remotely. All deployments of version 1.0 are affected.
💻 Affected Systems
- SourceCodester Online Student File Management System
📦 What is this software?
⚠️ Risk & Real-World Impact
Worst Case
Complete database compromise including data theft, data destruction, authentication bypass, and potential remote code execution via database functions.
Likely Case
Unauthorized access to student records, administrative credentials theft, and database manipulation.
If Mitigated
Limited impact with proper input validation and database permissions, but still poses authentication bypass risk.
🎯 Exploit Status
Public exploit code available on GitHub. Simple SQL injection requiring minimal technical skill.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Unknown
Vendor Advisory: https://www.sourcecodester.com/
Restart Required: No
Instructions:
No official patch available. Consider workarounds or replacing the software.
🔧 Temporary Workarounds
Input Validation Filter
allAdd parameterized queries or input validation to /admin/index.php Username parameter
Modify PHP code to use prepared statements: $stmt = $conn->prepare('SELECT * FROM users WHERE username = ?'); $stmt->bind_param('s', $username);
Web Application Firewall
allDeploy WAF with SQL injection rules to block malicious requests
🧯 If You Can't Patch
- Isolate the system behind a firewall with strict access controls
- Implement network segmentation to limit database server access
🔍 How to Verify
Check if Vulnerable:
Test /admin/index.php with SQL injection payloads in Username parameter (e.g., admin' OR '1'='1)Check Version:
Check software version in admin panel or readme filesVerify Fix Applied:
Verify that SQL injection attempts no longer succeed and return proper error handling📡 Detection & Monitoring
Log Indicators:
- SQL syntax errors in web server logs
- Multiple failed login attempts with SQL characters
- Unusual database queries from web application
Network Indicators:
- HTTP POST requests to /admin/index.php containing SQL keywords
- Unusual database port traffic from web server
SIEM Query:
source="web_logs" AND uri="/admin/index.php" AND (request CONTAINS "' OR" OR request CONTAINS "UNION" OR request CONTAINS "SELECT *")