CVE-2025-14588: itsourcecode Student Management System update_program.php sql injection
A security flaw has been discovered in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /updateprogram.php. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14588?
CVE-2025-14588 has been classified with a high severity due to the potential for remote SQL injection attacks.
How do I fix CVE-2025-14588?
To fix CVE-2025-14588, you should validate and sanitize the input arguments in the /update_program.php file to prevent SQL injection.
What systems are affected by CVE-2025-14588?
CVE-2025-14588 affects itsourcecode Student Management System version 1.0.
Can CVE-2025-14588 be exploited remotely?
Yes, CVE-2025-14588 can be exploited remotely due to its SQL injection vulnerability.
What are the potential impacts of CVE-2025-14588?
The potential impacts of CVE-2025-14588 include data loss, unauthorized access to the database, and potential control over the affected system.