CVE-2025-14578: itsourcecode Student Management System update_account.php sql injection
A weakness has been identified in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /updateaccount.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14578?
CVE-2025-14578 is classified as a high-severity SQL injection vulnerability.
How do I fix CVE-2025-14578?
To fix CVE-2025-14578, validate and sanitize all user inputs in the /update_account.php file to prevent SQL injection.
What software is affected by CVE-2025-14578?
CVE-2025-14578 affects the itsourcecode Student Management System version 1.0.
Can CVE-2025-14578 be exploited remotely?
Yes, CVE-2025-14578 can be exploited remotely, allowing attackers to exploit the vulnerability from external networks.
What type of vulnerability is CVE-2025-14578?
CVE-2025-14578 is an SQL injection vulnerability caused by manipulation of the ID argument.