Lucene search
+L

5590 matches found

osv_cve
osv_cve
•added 2025/12/08 10:16 a.m.•36 views

CVE-2025-14226

A vulnerability was identified in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /edituser.php. The manipulation of the argument fname leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and...

9.8CVSS7.2AI score0.00387EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/08 9:32 a.m.•53 views

CVE-2025-14226 itsourcecode Student Management System edit_user.php sql injection

A vulnerability was identified in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /edituser.php. The manipulation of the argument fname leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and...

7.5CVSS0.00387EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/08 9:32 a.m.•11 views

CVE-2025-14226 itsourcecode Student Management System edit_user.php sql injection

A vulnerability was identified in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /edituser.php. The manipulation of the argument fname leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and...

7.5CVSS7.2AI score0.00387EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/08 9:32 a.m.•45 views

CVE-2025-14226

CVE-2025-14226 affects itsourcecode Student Management System 1.0 with a SQL injection in /edit_user.php via the fname parameter. Exploitation can be remote; public PoC exists. Public reports (CNVD/Red Hat/NVD) confirm the flaw. Remediation guidance suggests sanitizing/validating the fname parame...

9.8CVSS7.2AI score0.00387EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2025/12/08 4:15 a.m.•20 views

CVE-2025-14214

A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /sectionedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and ma...

8.8CVSS0.00332EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2025/12/08 4:15 a.m.•39 views

CVE-2025-14214

A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /sectionedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and ma...

8.8CVSS6.3AI score0.00332EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/12/08 3:32 a.m.•61 views

CVE-2025-14214 itsourcecode Student Information System section_edit1.php sql injection

A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /sectionedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and ma...

6.5CVSS0.00332EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/12/08 3:32 a.m.•9 views

CVE-2025-14214 itsourcecode Student Information System section_edit1.php sql injection

A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /sectionedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and ma...

6.5CVSS6.3AI score0.00332EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/12/08 3:32 a.m.•21 views

EUVD-2025-201665

A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /sectionedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and ma...

6.5CVSS6.3AI score0.00332EPSS
SaveExploits1References7
CVE
CVE
•added 2025/12/08 3:32 a.m.•39 views

CVE-2025-14214

CVE-2025-14214 affects itsourcecode Student Information System 1.0. The vulnerability is a SQL injection in the file /section_edit1.php caused by manipulation of the ID parameter. Remote exploitation is possible and exploits have been publicly disclosed. Multiple connected sources confirm the iss...

8.8CVSS6.3AI score0.00332EPSS
SaveExploits1References6Affected Software1
NVD
NVD
•added 2025/12/08 2:15 a.m.•25 views

CVE-2025-14209

A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /updatequery.php. This manipulation of the argument studid causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and...

9.8CVSS0.00387EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/08 1:32 a.m.•11 views

CVE-2025-14209 Campcodes School File Management System update_query.php sql injection

A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /updatequery.php. This manipulation of the argument studid causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and...

7.5CVSS7.1AI score0.00387EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/12/08 1:32 a.m.•23 views

EUVD-2025-201656

A weakness has been identified in Campcodes School File Management System 1.0. This impacts an unknown function of the file /updatequery.php. This manipulation of the argument studid causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and...

7.5CVSS7.1AI score0.00387EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2025/12/08 1:16 a.m.•34 views

CVE-2025-14206

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be...

7.5CVSS6.2AI score0.00377EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/08 12:02 a.m.•64 views

CVE-2025-14206 SourceCodester Online Student Clearance System Fee Table delete-fee.php improper authorization

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be...

6.9CVSS0.00377EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/08 12:02 a.m.•11 views

CVE-2025-14206 SourceCodester Online Student Clearance System Fee Table delete-fee.php improper authorization

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be...

6.9CVSS6.2AI score0.00377EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/12/08 12:02 a.m.•23 views

EUVD-2025-201617

A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be...

6.9CVSS6.2AI score0.00377EPSS
SaveExploits1References6
CVE
CVE
•added 2025/12/08 12:02 a.m.•64 views

CVE-2025-14206

CVE-2025-14206 affects SourceCodester Online Student Clearance System 1.0 in the Fee Table Handler, specifically /Admin/delete-fee.php. Manipulating the ID parameter can lead to improper authorization, with remote exploitation; public exploit details exist. Remediation guidance across connected s...

7.5CVSS6.2AI score0.00377EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2025/12/08 12:00 a.m.•17 views

Itsourcecode Student Management System SQL Injection Vulnerability

Student Management System is a student management system. Student Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter fname in the file /edituser.php. The vulnerability can be exploited to...

9.8CVSS7.4AI score0.00387EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/12/08 12:00 a.m.•27 views

PT-2025-49539

Name of the Vulnerable Software and Affected Versions itsourcecode Student Management System version 1.0 Description A security issue exists in itsourcecode Student Management System 1.0. The issue affects code within the /edit user.php file. Manipulation of the fname argument can lead to a SQL...

9.8CVSS7.3AI score0.00387EPSS
SaveExploits1References13
Rows per page
Query Builder