CVE-2025-0203

Code-projects Student Management System 1.0 contains a SQL injection in the showSubject1 function (config/DbFunction.php) via the sid argument. This remote vulnerability can be triggered without authentication; multiple parameters may be affected. The issue has been publicly disclosed and is disc...

CVE-2025-0203: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Student Management System 1.0. It has been declared as critical. This vulnerability affects the function showSubject1 of the file /config/DbFunction.php. The manipulation of the argument sid leads to sql injection. The attack can be initiated remotely. T...

PT-2025-3776 · Code Projects · Code-Projects Student Management System

Name of the Vulnerable Software and Affected Versions: code-projects Student Management System version 1.0 Description: A critical issue has been found in the showSubject1 function of the file /config/DbFunction.php. The manipulation of the sid argument leads to SQL injection. The attack can be...