CVE-2025-10593: SourceCodester Online Student File Management System update_student.php sql injection

Published Sep 17, 2025

Updated

A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/updatestudent.php. Performing manipulation of the argument studid results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.

Affected Software

2 affected components

Sourcecodester Online Student File Management System

Janobe Online Student File Management System=1.0

Event History

Sep 17, 2025

CVE Published

via MITRE·01:32 PM

Data Sourced

via MITRE·01:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10593?

CVE-2025-10593 has a high severity rating due to the potential for remote SQL injection attacks.

How do I fix CVE-2025-10593?

To fix CVE-2025-10593, sanitize and validate all user inputs, especially the stud_id parameter, to eliminate the risk of SQL injection.

Which systems are affected by CVE-2025-10593?

CVE-2025-10593 affects the SourceCodester Online Student File Management System version 1.0.

Can CVE-2025-10593 be exploited remotely?

Yes, CVE-2025-10593 can be exploited remotely by manipulating the stud_id argument.

What type of attack does CVE-2025-10593 facilitate?

CVE-2025-10593 facilitates SQL injection attacks that can compromise the database security of the affected application.