7.3HIGH

CVE-2025-10596 — A vulnerability was found in SourceCodester Online Exam Form Submission 1.0.

Janobe · Online Exam Form Submission · Published 17 Sept 2025 · Modified 26 Sept 2026

Description

A vulnerability was found in SourceCodester Online Exam Form Submission 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument usn results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.

References

https://github.com/qcycop0101-hash/CVE/issues/16
https://vuldb.com/?ctiid.324613
https://vuldb.com/?id.324613
https://vuldb.com/?submit.649315
https://www.sourcecodester.com/

What to do

Check whether Online Exam Form Submission is in your asset inventory.
Patch in the next maintenance window; prioritise internet-facing systems.
Record the decision in your risk register for audit evidence.

Alert me on similar CVEs →

Link: adminadda.com/cve/CVE-2025-10596