Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/testimonials/manage.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
A lot of offensive activities were identified targeting SourceCodester Simple Company Website (CVE-2025-6869) https://vuldb.com/?ctiid.314341
Post summary
The post reports that offensive activities have been identified targeting SourceCodester Simple Company Website (CVE-2025-6869), implying the vulnerability is being actively exploited in the wild.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | oretnom23 | simple_company_website | 1.0 | - | - |