CVE-2025-10420: SourceCodester Student Grading System form137.php sql injection
Published Sep 15, 2025
·Updated
A vulnerability was detected in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /form137.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used.
Affected Software
2 affected components
Sourcecodester Student Grading System
oretnom23 Student Grading System=1.0
Event History
Sep 15, 2025
CVE Published
via MITRE·01:32 AM
Data Sourced
via MITRE·01:32 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeaknessAffected Software
Sep 2, 58718
Event
via NVD·12:24 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-10420?
CVE-2025-10420 is a critical vulnerability due to its potential for remote SQL injection attacks.
2
How do I fix CVE-2025-10420?
To fix CVE-2025-10420, sanitize and validate input parameters in the form137.php file to prevent SQL injection.
3
What software is affected by CVE-2025-10420?
CVE-2025-10420 affects the SourceCodester Student Grading System version 1.0.
4
Can CVE-2025-10420 be exploited remotely?
Yes, CVE-2025-10420 can be exploited remotely by manipulating the ID argument.
5
What consequence can CVE-2025-10420 have if exploited?
Exploitation of CVE-2025-10420 could lead to unauthorized access to the database and manipulation of data.