CVE-2025-12933 : faille critique janobe baby care system (CVSS 9.8)

A vulnerability was identified in SourceCodester Baby Care System 1.0. This affects an unknown part of the file /updatewelcome.php?id=siteoptions&action=welcome. Such manipulation of the argument roleid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.

Sévérité

Critique (CVSS 9.8)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitation active

Non signalée par la CISA

Publication

10 nov. 2025

Dernière mise à jour

17 juin 2026

• janobe baby care system

• Fiche CVE-2025-12933 sur le NVD (NIST)
• github.com/puppytgyh/-CVE/issues/8
• vuldb.com/
• vuldb.com/
• vuldb.com/
• sourcecodester.com/