317 matches found
CVE-2025-10408
SourceCodester Student Grading System 1.0 has a SQL injection in /edit_user.php triggered by manipulating the ID parameter. The issue is exploitable remotely and an exploit is publicly available. Multiple feeds corroborate this vulnerability; remediation guidance in related advisories suggests sa...
CVE-2025-10408 SourceCodester Student Grading System edit_user.php sql injection
A security flaw has been discovered in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionality of the file /edituser.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been release...
CVE-2025-10407 SourceCodester Student Grading System view_user.php sql injection
A vulnerability was identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewuser.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...
CVE-2025-10407 SourceCodester Student Grading System view_user.php sql injection
A vulnerability was identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewuser.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...
CVE-2025-10407
CVE-2025-10407 affects SourceCodester Student Grading System 1.0. The vulnerability is a SQL injection in the file /view_user.php caused by manipulation of the ID parameter, enabling remote exploitation. Public exploits exist. Impact/mitigation details in connected docs indicate no formal patch/v...
SourceCodester Student Grading System SQL注入漏洞
SourceCodester Student Grading System is a SourceCodester open source student grading system. A SQL injection vulnerability exists in SourceCodester Student Grading System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /edituser.php, which could lead to a SQL...
PT-2025-37427
Name of the Vulnerable Software and Affected Versions: SourceCodester Student Grading System version 1.0 Description: A SQL injection issue exists in the /view user.php file due to manipulation of the ID argument. This allows for remote exploitation. The exploit is publicly available...
SourceCodester Student Grading System SQL注入漏洞
SourceCodester Student Grading System is a SourceCodester open source student grading system. A SQL injection vulnerability exists in SourceCodester Student Grading System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /viewuser.php, which could lead to a SQL...
SourceCodester Student Grading System SQL注入漏洞
SourceCodester Student Grading System is an open source student grading system from SourceCodester. A SQL injection vulnerability exists in SourceCodester Student Grading System version 1.0, which stems from an incorrect manipulation of the parameter fname in the file /rms.php, which could lead t...
PT-2025-37429
Name of the Vulnerable Software and Affected Versions: SourceCodester Student Grading System version 1.0 Description: A weakness exists in SourceCodester Student Grading System 1.0. The issue affects an unknown part of the file /rms.php?page=users. Manipulation of the fname argument can lead to S...
PT-2025-37428
Name of the Vulnerable Software and Affected Versions: SourceCodester Student Grading System version 1.0 Description: A security flaw exists in SourceCodester Student Grading System 1.0. The issue is related to SQL injection within the /edit user.php file. Manipulation of the ID parameter can...
Simple Grading System login.php File SQL Injection Vulnerability
Simple Grading System is a simple grading system. Simple Grading System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the file /login.php. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...
CVE-2025-9667
A vulnerability was detected in code-projects Simple Grading System 1.0. This affects an unknown part of the file /deleteaccount.php of the component Admin Panel. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public a...
CVE-2025-9663
A vulnerability was identified in code-projects Simple Grading System 1.0. This impacts an unknown function of the file /editaccount.php of the component Admin Panel. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicl...
CVE-2025-9662
A vulnerability was determined in code-projects Simple Grading System 1.0. This affects an unknown function of the file /login.php of the component Admin Panel. Executing manipulation can lead to sql injection. The attack may be performed from a remote location. The exploit has been publicly...
CVE-2025-9664
A security flaw has been discovered in code-projects Simple Grading System 1.0. Affected is an unknown function of the file /addstudentgrade.php of the component Admin Panel. The manipulation of the argument Add results in sql injection. It is possible to launch the attack remotely. The exploit h...
CVE-2025-9667
A vulnerability was detected in code-projects Simple Grading System 1.0. This affects an unknown part of the file /deleteaccount.php of the component Admin Panel. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public a...
CVE-2025-9667
A vulnerability was detected in code-projects Simple Grading System 1.0. This affects an unknown part of the file /deleteaccount.php of the component Admin Panel. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public a...
CVE-2025-9667
Summary: CVE-2025-9667 affects code-projects Simple Grading System 1.0, specifically the Admin Panel file /delete_account.php. The vulnerability arises from improper handling of the ID parameter, allowing SQL injection that can be exploited remotely and publicly disclosed. Affected component: Sim...
CVE-2025-9667 code-projects Simple Grading System Admin Panel delete_account.php sql injection
A vulnerability was detected in code-projects Simple Grading System 1.0. This affects an unknown part of the file /deleteaccount.php of the component Admin Panel. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public a...