CVE-2025-1596

Summary

CVE-2025-1596: A critical vulnerability was discovered in the SourceCodester Best Church Management Software version 1.0. This issue involves unsecured processing of the file /fpassword.php, leading to SQL injection. Manipulation of the email argument can be exploited remotely, allowing attackers to gain unauthorized access. The vulnerability has been disclosed to the public, increasing the risk of exploitation. Despite early notifications to the vendor, they have yet to respond or provide a patch.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.