CVE-2025-8926: A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argume...

Summary

A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
unyasoft	covid19_testing_management_system	1.0 `cpe:2.3:a:unyasoft:covid19_testing_management_system:1.0:::::::*`

Original advisory text

A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argume...

A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

References

https://vuldb.com/?ctiid.319885 Permissions Required VDB Entry
https://vuldb.com/?id.319885 Third Party Advisory VDB Entry
https://vuldb.com/?submit.631603 Third Party Advisory VDB Entry
https://www.sourcecodester.com/ Product
https://github.com/lrjbsyh/CVE_Hunter/issues/2#issue-3307768438 Exploit Issue Tracking Third Party Advisory