CVE-2025-3205

CVE-2025-3205 affects CodeAstro Student Grading System 1.0. The vulnerability is in the studentsubject.php file, where manipulating the studentId parameter leads to SQL injection. Exploitation can be performed remotely via a network attack, and the exploit has been publicly disclosed. There is no...

CVE-2025-11118

The CVE-2025-11118 entry affects CodeAstro Student Grading System 1.0. A flaw in handling the staffId parameter in /adminLogin.php allows SQL injection, with remote exploitation and public proof-of-concept exploits. Impact is indicated as high in multiple sources, including NVD metrics; exploitat...