CVE-2025-13059

MediumCVSS 6.3

Published: 12/11/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

27th percentile - higher than 27% of all known CVEs

Summary

A weakness has been identified in SourceCodester Alumni Management System 1.0. The impacted element is an unknown function of the file /manage_career.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.

Risk Assessment

This may allow an attacker to access the database, modify or steal data.

Recommendation

Update the system to a version that fixes the vulnerability or implement input validation patches.

Other vulnerabilities in SourceCodester Alumni Management System

CVE-2025-13468Medium
A weakness was identified in SourceCodester Alumni Management System 1.0 affecting delete_forum/delete_career/delete_comment/delete_gallery/delete_event in admin/admin_class.php (Delete Handler). Manipulating the ID argument leads to missing authorization, and the attack can be launched remotely. The exploit is publicly available.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS