CVE-2025-12939 : faille critique janobe interview management system (CVSS 9.8)

A security flaw has been discovered in SourceCodester Interview Management System up to 1.0. Affected by this issue is some unknown functionality of the file /addCandidate.php. The manipulation of the argument candName results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be exploited.

Sévérité

Critique (CVSS 9.8)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitation active

Non signalée par la CISA

Publication

10 nov. 2025

Dernière mise à jour

17 juin 2026

• janobe interview management system

• Fiche CVE-2025-12939 sur le NVD (NIST)
• github.com/puppytgyh/-CVE/issues/10
• vuldb.com/
• vuldb.com/
• vuldb.com/
• sourcecodester.com/