CVE-2025-46190
9.8 criticalEPSS 0.4%
Critical (9.8) in lerouxyxchire client database management system. EPSS 0.4% chance of exploitation in the next 30 days.
SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_delivery_update.php via the order_id POST parameter.
Severity
CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- lerouxyxchire:client_database_management_system
References
Check your stackJSON