CVE-2025-0203

Code-projects Student Management System 1.0 contains a SQL injection in the showSubject1 function (config/DbFunction.php) via the sid argument. This remote vulnerability can be triggered without authentication; multiple parameters may be affected. The issue has been publicly disclosed and is disc...

CVE-2025-0203 code-projects Student Management System DbFunction.php showSubject1 sql injection

A vulnerability was found in code-projects Student Management System 1.0. It has been declared as critical. This vulnerability affects the function showSubject1 of the file /config/DbFunction.php. The manipulation of the argument sid leads to sql injection. The attack can be initiated remotely. T...