CVE-2025-11118: CodeAstro Student Grading System adminLogin.php sql injection

Published Sep 28, 2025

Updated

A vulnerability was identified in CodeAstro Student Grading System 1.0. This issue affects some unknown processing of the file /adminLogin.php. Such manipulation of the argument staffId leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.

Affected Software

2 affected components

Codeastro Student Grading System

Codeastro Student Grading System=1.0

Event History

Sep 28, 2025

CVE Published

via MITRE·08:02 PM

Data Sourced

via MITRE·08:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11118?

CVE-2025-11118 is considered a high severity vulnerability due to its potential for remote SQL injection attacks.

How do I fix CVE-2025-11118?

To fix CVE-2025-11118, validate and sanitize user input in the /adminLogin.php file to prevent SQL injection.

Can CVE-2025-11118 be exploited remotely?

Yes, CVE-2025-11118 can be exploited remotely by manipulating the staffId argument in the vulnerable PHP script.

Which software is affected by CVE-2025-11118?

CVE-2025-11118 affects CodeAstro Student Grading System version 1.0.

Is there a patch available for CVE-2025-11118?

As of now, specific patch details for CVE-2025-11118 have not been publicly disclosed.