CVE-2025-10665

The CVE-2025-10665 entry concerns kidaze CourseSelectionSystem (versions prior to 42cd892b40a18d50bd4ed1905fa89f939173a464). The vulnerability is in an unknown function of the file /Profilers/PProfile/COUNT3s3.php where the parameter csem is manipulated to cause SQL injection. Remote exploitation...

CVE-2025-11032

CVE-2025-11032 affects kidaze CourseSelectionSystem (pre-42cd892b40a18d50bd4ed1905fa89f939173a464). The flaw stems from improper handling of the CPU argument in /Profilers/PriProfile/COUNT3s6.php, enabling remote, network-based SQL injection with no required privileges or user interaction. Exploi...

CVE-2025-11033

The CVE-2025-11033 entry concerns kidaze CourseSelectionSystem and a SQL injection in an unknown function of /Profilers/PriProfile/COUNT3s7.php via the cbe parameter. Remote exploitation is possible, and exploits have been disclosed publicly. Multiple feeds confirm impact is related to SQL inject...

CVE-2025-14565

The CVE-2025-14565 entry concerns kidaze CourseSelectionSystem. Multiple connected sources confirm a vulnerability in the file /Profilers/SProfile/login1.php where manipulation of the Username argument leads to SQL injection. This affects the system upstream of the commit 42cd892b40a18d50bd4ed190...

CVE-2025-11052

CVE-2025-11052 affects kidaze CourseSelectionSystem version 1.0/5.php, with the vulnerability located in /Profilers/PriProfile/COUNT3s5.php where manipulating the csslc parameter leads to SQL injection. The issue is exploitable remotely and an exploit has been publicly released. Multiple sources ...

CVE-2025-10477

CVE-2025-10477 affects kidaze CourseSelectionSystem. The vulnerability is a SQL injection caused by manipulation of the Branch argument in an unknown function within /Profilers/PriProfile/eligibility.php. It is exploitable remotely, and publicly available exploits exist. The product does not use ...

CVE-2025-11089

Kidaze CourseSelectionSystem is affected by a SQL injection in /Profilers/PriProfile/COUNT3s4.php via manipulated cbranch. The vulnerability can be exploited remotely and is supported by public disclosure. Affected versions are before the 42cd892b40a18d50bd4ed1905fa89f939173a464 hash (as per sour...

CVE-2025-14566

CVE-2025-14566 affects kidaze CourseSelectionSystem, where manipulation of the USN argument in /Profilers/SProfile/reg.php enables SQL injection. The vulnerability is exploitable remotely, and public exploits exist per initial documents. The exploitation targets the unknown function in reg.php, w...

CVE-2025-10597

CVE-2025-10597 affects kidaze CourseSelectionSystem: SQL injection via cname in /Profilers/PriProfile/COUNT2.php. Remote attack possible; vulnerable for versions prior to 42cd892b40a18d50bd4ed1905fa89f939173a464 (per connected PT-2025-38221). Recommendations include sanitizing the cname parameter...