CVE-2025-2655
CVSS 3.1 Score 7.3 of 10 (high)
Details
Published Mar 23, 2025
CWE ID 74
CWE ID 89
Summary
CVE-2025-2655 is a critical vulnerability affecting the SourceCodester AC Repair and Services System 1.0. The issue lies within the save_users function of the /classes/Users.php file, where manipulation of the ID argument can lead to SQL injection. This vulnerability can be exploited remotely, and the disclosure of the exploit to the public increases the risk. Additionally, other parameters may also be susceptible to this attack.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- SourceCodester AC Repair and Services System
Affected Vendors
- Sourcecodester