CVE-2025-10409 SourceCodester Student Grading System rms.php sql injection

A weakness has been identified in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /rms.php?page=users. Executing manipulation of the argument fname can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public...

CVE-2025-10409: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /rms.php?page=users. Executing manipulation of the argument fname can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public...

CVE-2022-28024

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=grade...

CVE-2022-28024

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=grade...

CVE-2022-28026

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=studentp&id=...

Sql injection

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=studentp&id=...

Sql injection

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=schoolyear...

PT-2022-18764

Name of the Vulnerable Software and Affected Versions Student Grading System version 1.0 Description A SQL injection issue was found in the Student Grading System. The issue can be exploited via the "/student-grading-system/rms.php?page=grade" API endpoint. Recommendations For Student Grading...

CVE-2022-28026: Improper Neutralization of Special Elements used in an SQL Command

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=studentp&id=...

PT-2022-18766

Name of the Vulnerable Software and Affected Versions Student Grading System version 1.0 Description A SQL injection issue was found in the Student Grading System. The issue can be exploited via the "/student-grading-system/rms.php?page=student p&id=" API endpoint, where the id variable is...

PT-2022-18765

Name of the Vulnerable Software and Affected Versions Student Grading System version 1.0 Description A SQL injection issue was found in the Student Grading System. The issue can be exploited via the "/student-grading-system/rms.php?page=school year" API endpoint. Recommendations For version 1.0,...

CVE-2022-28024: Improper Neutralization of Special Elements used in an SQL Command

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=grade...

CVE-2022-28025: Improper Neutralization of Special Elements used in an SQL Command

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=schoolyear...