SourceCodester Company Website CMS vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting SourceCodester Company Website CMS: 2 record(s), with affected versions and fixes.
CVE-2025-13561
Critical · 9.8
CWE-89 Nov 23, 2025
SourceCodester Company Website CMS index.php sql injection
A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.php. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
CVE-2025-13560
Critical · 9.8
CWE-89 Nov 23, 2025
SourceCodester Company Website CMS reset-password.php sql injection
A vulnerability was found in SourceCodester Company Website CMS 1.0. This affects an unknown part of the file /admin/reset-password.php. The manipulation of the argument email results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.