CVE-2025-14335: itsourcecode Student Management System new_school_year.php sql injection
A vulnerability has been found in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /newschoolyear.php. The manipulation of the argument sy leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14335?
CVE-2025-14335 is classified as a critical vulnerability due to its potential for remote SQL injection.
How do I fix CVE-2025-14335?
To fix CVE-2025-14335, it is essential to sanitize user inputs on the /new_school_year.php file to prevent SQL injection.
What types of attacks can be executed using CVE-2025-14335?
CVE-2025-14335 can enable attackers to perform remote SQL injection attacks, potentially compromising the database.
Which software is affected by CVE-2025-14335?
CVE-2025-14335 affects the itsourcecode Student Management System version 1.0.
When was CVE-2025-14335 discovered?
CVE-2025-14335 was discovered recently and is part of ongoing security assessment activities.