CVE-2025-14623: fallo de gravedad media en code-projects Student File Management System
code-projects Student File Management System update_student.php sql injection
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.9epss 0.4%
A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
code-projects · Student File Management SystemCVEs relacionadas — code-projects Student File Management System
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-14620MEDIUMcode-projects Student File Management System login_query.php sql injectionEPSS 0.5%CVE-2025-14619MEDIUMcode-projects Student File Management System login_query.php sql injectionEPSS 0.5%CVE-2025-14646MEDIUMcode-projects Student File Management System delete_student.php sql injectionEPSS 0.4%CVE-2025-14645MEDIUMcode-projects Student File Management System delete_user.php sql injectionEPSS 0.4%CVE-2025-14640MEDIUMcode-projects Student File Management System save_student.php sql injectionEPSS 0.4%CVE-2025-14622MEDIUMcode-projects Student File Management System save_user.php sql injectionEPSS 0.4%