CVE-2025-14334: itsourcecode Student Management System new_adviser.php sql injection
A flaw has been found in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /newadviser.php. Executing manipulation of the argument Name can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14334?
CVE-2025-14334 has been classified as a critical severity vulnerability due to its potential for SQL injection, which can lead to unauthorized access to database information.
How do I fix CVE-2025-14334?
To fix CVE-2025-14334, it is recommended to sanitize and validate user inputs in the /new_adviser.php file to prevent SQL injection attacks.
Which software is affected by CVE-2025-14334?
CVE-2025-14334 affects the itsourcecode Student Management System version 1.0.
Can CVE-2025-14334 be exploited remotely?
Yes, CVE-2025-14334 can be exploited remotely by manipulating the argument Name.
What type of vulnerability is CVE-2025-14334?
CVE-2025-14334 is classified as an SQL injection vulnerability.