VULNERABILITY INTELLIGENCE

CVE-2025-9757

CVSS score9.8 CRITICAL

EPSS probability0.45%

CISA KEVNot currently listed

Published2025-09-01

Last modified2026-10-18

Description

A vulnerability was determined in Campcodes/SourceCodester Courier Management System 1.0. Affected is the function Login of the file /ajax.php. This manipulation of the argument email causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.