CVE-2025-67407: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updatestudent.php via parameters fname and studentclass...

CVE-2025-67407

The Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection within the update_student.php file. The vulnerability is triggered via the fname and student_class parameters. The CVSS 3.1 score is 7.3 (High) , indicating a network-accessible flaw requiring no privileges or...

CVE-2025-14663: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/updatestudent.php. Executing manipulation can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed a...

CVE-2025-14623

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/updatestudent.php. This manipulation of the argument studid causes sql injection. The attack is possible to be carried out remotely. The exploit has be...

CVE-2025-14623: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/updatestudent.php. This manipulation of the argument studid causes sql injection. The attack is possible to be carried out remotely. The exploit has be...

CVE-2025-10593 SourceCodester Online Student File Management System update_student.php sql injection

A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/updatestudent.php. Performing manipulation of the argument studid results in sql injection. It is possible to initiate the attack remotely. The exploit is n...

CVE-2025-10593: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/updatestudent.php. Performing manipulation of the argument studid results in sql injection. It is possible to initiate the attack remotely. The exploit is n...

CVE-2025-4912: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in SourceCodester Student Result Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/core/updatestudent.php of the component Image File Handler. The manipulation of the argument oldphoto lea...