Lucene search
+L

830 matches found

osv_cve
osv_cve
•added 2025/12/14 10:15 a.m.•18 views

CVE-2025-14653

A vulnerability was determined in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /addrecord.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/14 10:15 a.m.•17 views

CVE-2025-14653

A vulnerability was determined in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /addrecord.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be...

9.8CVSS0.00387EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/14 9:32 a.m.•39 views

CVE-2025-14653

CVE-2025-14653 affects itsourcecode Student Management System 1.0. The vulnerability is in an unknown function of /addrecord.php where manipulation of the ID parameter enables SQL injection. Remote exploitation is possible and exploits have been publicly disclosed. Documents consistently describe...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/12/14 9:32 a.m.•45 views

CVE-2025-14653 itsourcecode Student Management System addrecord.php sql injection

A vulnerability was determined in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /addrecord.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be...

7.5CVSS0.00387EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/12/14 6:30 a.m.•17 views

EUVD-2025-203282

A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /updatesubject.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclos...

7.5CVSS7.1AI score0.00387EPSS
SaveExploits1References6
CVE
CVE
•added 2025/12/14 6:02 a.m.•54 views

CVE-2025-14646

The CVE-2025-14646 entry describes a SQL injection in code-projects Student File Management System 1.0, triggered by manipulating the stud_id parameter in /admin/delete_student.php. Connected documents (CNVD-2026-00828, RH:CVE-2025-14646, CNNVD-202512-2597, VULNRICHMENT/CVE-2025-14646, PT-2025-51...

9.8CVSS7AI score0.00415EPSS
SaveExploits1References6Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/14 3:32 a.m.•9 views

CVE-2025-14644 itsourcecode Student Management System update_subject.php sql injection

A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /updatesubject.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclos...

7.5CVSS7.1AI score0.00387EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/14 3:32 a.m.•43 views

CVE-2025-14644

CVE-2025-14644 affects itsourcecode Student Management System 1.0. The vulnerability is an SQL injection in the /update_subject.php file triggered by manipulating the ID parameter, exploitable remotely. Public exploits exist per sources, and multiple feeds (NVD, Red Hat, EUVD, CNNVD, CVE records)...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/12/14 3:32 a.m.•47 views

CVE-2025-14644 itsourcecode Student Management System update_subject.php sql injection

A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /updatesubject.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclos...

7.5CVSS0.00387EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/12/14 2:15 a.m.•24 views

CVE-2025-14639

A vulnerability was detected in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /uprec.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used...

9.8CVSS7.2AI score0.00387EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/14 2:15 a.m.•20 views

CVE-2025-14639

A vulnerability was detected in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /uprec.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used...

9.8CVSS0.00387EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/14 1:02 a.m.•8 views

CVE-2025-14639 itsourcecode Student Management System uprec.php sql injection

A vulnerability was detected in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /uprec.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used...

7.5CVSS7.2AI score0.00387EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/14 1:02 a.m.•41 views

CVE-2025-14639

CVE-2025-14639 affects itsourcecode Student Management System 1.0. The vulnerability is an SQL injection in the file /uprec.php caused by manipulating the ID parameter, with network-based remote exploitation reportedly possible and the exploit publicly available. Multiple connected sources corrob...

9.8CVSS7.2AI score0.00387EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/12/14 1:02 a.m.•47 views

CVE-2025-14639 itsourcecode Student Management System uprec.php sql injection

A vulnerability was detected in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /uprec.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used...

7.5CVSS0.00387EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/12/14 12:00 a.m.•21 views

Itsourcecode Student Management System SQL Injection Vulnerability

itsourcecode Student Management System is an open source student management system from itsourcecode. A SQL injection vulnerability exists in version 1.0 of itsourcecode Student Management System, which stems from an incorrect manipulation of the parameter sy in the file /advisers.php, which coul...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/12/14 12:00 a.m.•21 views

Itsourcecode Student Management System SQL Injection Vulnerability

itsourcecode Student Management System is an open source student management system from itsourcecode. A SQL injection vulnerability exists in version 1.0 of itsourcecode Student Management System, which stems from incorrect manipulation of the parameter ID in the file /updatesubject.php, which...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/12/14 12:00 a.m.•21 views

Itsourcecode Student Management System SQL Injection Vulnerability

itsourcecode Student Management System is an open source student management system from itsourcecode. A SQL injection vulnerability exists in version 1.0 of itsourcecode Student Management System, which stems from incorrect manipulation of the parameter ID in the file /uprec.php, which could lead...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/12/14 12:00 a.m.•23 views

PT-2025-51137

Name of the Vulnerable Software and Affected Versions itsourcecode Student Management System version 1.0 Description A SQL injection issue exists in itsourcecode Student Management System 1.0. The issue is located in the file /uprec.php. Manipulation of the ID argument can lead to SQL injection...

9.8CVSS7.2AI score0.00387EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/14 12:00 a.m.•8 views

CVE-2025-14653: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /addrecord.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/14 12:00 a.m.•4 views

CVE-2025-14644: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /updatesubject.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclos...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References6
Rows per page
Query Builder