2 matches found
CVE-2025-14214: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /sectionedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and ma...
8.8CVSS6.4AI score0.00332EPSS
SaveExploits1References7
itsourcecode Student Information System SQL注入漏洞
itsourcecode Student Information System is an open source student information system by itsourcecode. A SQL injection vulnerability exists in version 1.0 of itsourcecode Student Information System, which stems from incorrect manipulation of the parameter ID in the file /sectionedit1.php, which...
8.8CVSS6.7AI score0.00332EPSS
SaveExploits1References6
20