CVE-2025-14337: itsourcecode Student Management System new_grade.php sql injection
A vulnerability was determined in itsourcecode Student Management System 1.0. This affects an unknown part of the file /newgrade.php. This manipulation of the argument grade causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14337?
CVE-2025-14337 is classified as a high severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2025-14337?
To fix CVE-2025-14337, sanitize and validate all user inputs in the /new_grade.php file to prevent SQL injection.
What systems are affected by CVE-2025-14337?
CVE-2025-14337 affects itsourcecode Student Management System version 1.0.
Can CVE-2025-14337 be exploited remotely?
Yes, CVE-2025-14337 can be exploited remotely by manipulating the grade parameter.
Is CVE-2025-14337 publicly disclosed?
Yes, CVE-2025-14337 has been publicly disclosed and is known to the cybersecurity community.