Vulnerability Description
A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function save_user/update_user of the file /LoginRegistration.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. Other parameters might be affected as well.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oretnom23 | Survey Application System | 1.0 |
Related Weaknesses (CWE)
References
- https://github.com/lakshayyverma/CVE-Discovery/blob/main/Survey%20Application%20ExploitThird Party Advisory
- https://vuldb.com/?ctiid.331649Permissions RequiredVDB Entry
- https://vuldb.com/?id.331649Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.681746Third Party AdvisoryVDB Entry
- https://www.sourcecodester.com/Product
- https://github.com/lakshayyverma/CVE-Discovery/blob/main/Survey%20Application%20ExploitThird Party Advisory
FAQ
What is CVE-2025-12929?
CVE-2025-12929 is a vulnerability with a CVSS score of 7.3 (HIGH). A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function save_user/update_user of the file /LoginRegistration.php. Executing manipulation of the argument fullna...
How severe is CVE-2025-12929?
CVE-2025-12929 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-12929?
Check the references section above for vendor advisories and patch information. Affected products include: Oretnom23 Survey Application System.