CVE-2025-28087 - Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php

CRITICAL

Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php

Published Mar 28, 2025

9.8

CRITICAL

CVSS 3.1

EPSS 0.49%

Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-8660		Advisory
https://www.yuque.com/morysummer/vx41bz/vxhdpdeavzvtvdqq		exploitThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 28, 2025

Updated Mar 31, 2025

Reserved Mar 11, 2025

CISA Vulnrichment

Updated Mar 31, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 28, 2025

Updated Mar 31, 2025

GitHub

No data