CVE-2025-2655 — SourceCodester AC Repair and Services System Users.php delete_users sql injection
A vulnerability was detected in SourceCodester AC Repair and Services System 1.0. The affected element is the function save_users/delete_users of the file /classes/Users.php. Pe…
Published: 2025-03-23 · CVSS: 6.9 · CVSS 4.0
A vulnerability was detected in SourceCodester AC Repair and Services System 1.0. The affected element is the function save_users/delete_users of the file /classes/Users.php. Performing manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. Other parameters might be affected as well.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7