Vulnerability · Published Sep 2, 2025 · Assigned by VulDB
CVE-2025-9833SourceCodester Online Farm Management System login.php sql injection
High 7.3
In plain English
A high-severity SQL injection in Online Farm Management System from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).
Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.4%top 61.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability was detected in SourceCodester Online Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /Login/login.php. Performing manipulation of the argument uname results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Online Farm Management System | 1.0 |
Weakness: CWE-89, CWE-74 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-322180 | SourceCodester Online Farm Management System login.php sql injection vdb-entry, technical-description
- VDB-322180 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #641720 | SourceCodester Online Farm Management System in PHP/MySQL Project 1.0 SQL Injection third-party-advisory
- https://github.com/ganzhi-qcy/cve/issues/17 exploit, issue-tracking
- https://www.sourcecodester.com/ product