# CVE-2025-4909

## Summary

- **CVE ID:** CVE-2025-4909
- **Severity:** MEDIUM
- **CVSS Score:** 7.5 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)
- **CWE:** CWE-548, CWE-552
- **Published:** May 19, 2025
- **Last Modified:** Mar 13, 2026

## Description

A vulnerability classified as critical was found in SourceCodester Client Database Management System 1.0. This vulnerability affects unknown code. The manipulation leads to exposure of information through directory listing. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

## Affected Products

- SourceCodester — Client Database Management System (1.0)

## References

- [CNA](https://vuldb.com/?id.309466)
- [CNA](https://vuldb.com/?ctiid.309466)
- [CNA](https://vuldb.com/?submit.578723)
- [CNA](https://github.com/dengxun628/cve/issues/3)
- [CNA](https://www.sourcecodester.com/)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.51%
- **EPSS Percentile:** 42.0

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._