2 matches found
CVE-2025-9838: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in itsourcecode Student Information Management System 1.0. Impacted is an unknown function of the file /admin/modules/subject/index.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly availab...
9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
itsourcecode Student Information Management System 安全漏洞
itsourcecode Student Information Management System is an open source student information management system from itsourcecode. A security vulnerability exists in itsourcecode Student Information Management System version 1.0, which is caused by SQL injection due to incorrect manipulation of the...
9.8CVSS7.6AI score0.00421EPSS
SaveExploits1References7
20