VULNERABILITY INTELLIGENCE

CVE-2025-46192

CVSS score9.8 CRITICAL

EPSS probability0.42%

CISA KEVNot currently listed

Published2025-05-09

Last modified2026-06-17

Description

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_payment_update.php via the order_id POST parameter.