CVE-2025-46192

Description

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_payment_update.php via the order_id POST parameter.

PUBLISHED Reserved 2025-04-22 | Published 2025-05-09 | Updated 2025-05-10 | Assigner mitre

References

www.invicti.com/learn/blind-sql-injection/

github.com/x6vrn/mitre/blob/main/CVE-2025-46192.md

cve.org (CVE-2025-46192)

nvd.nist.gov (CVE-2025-46192)

Download JSON