CVE-2025-10594

CVE-2025-10594 affects SourceCodester Online Student File Management System 1.0. The vulnerability is an SQL injection in the /admin/delete_student.php endpoint caused by unsafely manipulating the stud_id parameter, exploitable remotely. Multiple connected sources confirm the flaw; exploit is pub...

CVE-2025-10593

SourceCodester Online Student File Management System 1.0 is affected by a SQL injection in /admin/update_student.php when manipulating the stud_id parameter. The vulnerability is exploitable remotely, and public exploits exist. The root cause is improper handling/validation of the input in update...

CVE-2025-10480

The provided connected documents confirm a concrete vulnerability in SourceCodester Online Student File Management System 1.0 affecting an unknown function in /save_file.php that allows unrestricted file upload. This vulnerability can be exploited remotely and is backed by publicly available expl...

CVE-2025-10481

CVE-2025-10481 affects SourceCodester Online Student File Management System v1.0. The vulnerability exists in the /remove_file.php endpoint, where manipulating the ID parameter leads to SQL injection. Remote exploitation is possible and, per sources, the exploit has been disclosed publicly. Multi...

CVE-2025-10482

SourceCodester Online Student File Management System 1.0 is affected by a SQL injection in /admin/index.php where manipulating the Username parameter enables remote exploitation. The vulnerability stems from an input handling issue in an unknown function, leading to potential disclosure/modificat...

CVE-2025-10595

SourceCodester Online Student File Management System 1.0 contains a SQL injection in /admin/delete_user.php triggered by manipulating the user_id parameter. The issue can be exploited remotely and the exploit has been publicly disclosed. Multiple sources corroborate the vulnerability in the delet...

CVE-2025-10483

CVE-2025-10483 affects SourceCodester Online Student File Management System 1.0. The vulnerability is in the unknown functionality of the file /admin/save_user.php, where manipulation of thefirstname parameter leads to a SQL injection. The exploit has been published and can be executed remotely, ...

CVE-2025-10479

The CVE-2025-10479 entry concerns SourceCodester Online Student File Management System 1.0. The vulnerability is a SQL injection in the /index.php file triggered by manipulating the stud_no argument, with remote exploitation and an exploit publicly released. Multiple connected sources corroborate...