CVE-2025-5649: fallo de gravedad media en SourceCodester Student Result Management System
SourceCodester Student Result Management System Register Interface new_user access control
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.9epss 0.6%
A vulnerability classified as critical has been found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file /admin/core/new_user of the component Register Interface. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Productos afectados
SourceCodester · Student Result Management SystemCVEs relacionadas — SourceCodester Student Result Management System
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-4912MEDIUMSourceCodester Student Result Management System Image File update_student.php path traversalEPSS 0.9%CVE-2025-4720MEDIUMSourceCodester Student Result Management System drop_student.php path traversalEPSS 0.7%CVE-2026-2938MEDIUMSourceCodester Student Result Management System update_smtp.php access controlEPSS 0.6%CVE-2025-4898MEDIUMSourceCodester Student Result Management System Logo File update_system.php unlink path traversalEPSS 0.6%CVE-2026-2984MEDIUMSourceCodester Student Result Management System drop_user.php denial of serviceEPSS 0.6%CVE-2026-2983MEDIUMSourceCodester Student Result Management System Bulk Import import_users.php access controlEPSS 0.5%