CVE-2025-14536: code-projects Class and Exam Timetable Management Login index.php sql injection
A security flaw has been discovered in code-projects Class and Exam Timetable Management 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument username/password results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14536?
CVE-2025-14536 has been classified as a critical vulnerability due to its potential for SQL injection.
How do I fix CVE-2025-14536?
To fix CVE-2025-14536, update the Class and Exam Timetable Management software to a version that addresses this SQL injection vulnerability.
Which component is affected by CVE-2025-14536?
CVE-2025-14536 affects the Login component in the file /index.php of the Class and Exam Timetable Management application.
What type of vulnerability is CVE-2025-14536?
CVE-2025-14536 is an SQL injection vulnerability that occurs through manipulation of the username and password arguments.
What are the impacts of exploiting CVE-2025-14536?
Exploiting CVE-2025-14536 could allow attackers to execute arbitrary SQL commands, potentially compromising the database and sensitive data.