EXPOSURES › CVE-2025-12939
CVE-2025-12939
MEDIUM
DETAIL
SourceNVD · cve
Published2025-11-10
CVSS6.3
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-12939 ↗
▸ RECOMMENDED ACTION Patch the affected products and confirm your instances are covered.
PLAYERS IMPLICATED
DESCRIPTION
A security flaw has been discovered in SourceCodester Interview Management System up to 1.0. Affected by this issue is some unknown functionality of the file /addCandidate.php. The manipulation of the argument candName results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be exploited.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.