Description
SourceCodester Client Database Management System是SourceCodester开源的一个客户端数据库管理系统。 SourceCodester Client Database Management System 1.0版本存在注入漏洞，该漏洞源于文件/user_proposal_update_order.php对参数order_id处理不当，可能导致SQL注入。
SourceCodester Client Database Management System 注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2025-46189
https://github.com/laifeng-boy/cve/issues/5
https://vulners.com/cve/CVE-2025-4924
https://www.ameeba.com/blog/cve-2025-46189-sql-injection-vulnerability-in-sourcecodester-client-database-management-system-1-0/
https://vuldb.com/vuln/312635
https://nvd.nist.gov/vuln/detail/CVE-2025-14885
https://www.sourcecodester.com/php/17514/client-database-management-system.html