CVE-2025-14619: code-projects Student File Management System login_query.php sql injection
A vulnerability was found in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file loginquery.php. Performing manipulation of the argument studno results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14619?
CVE-2025-14619 is classified as a high-severity vulnerability due to its potential for remote exploitation via SQL injection.
How do I fix CVE-2025-14619?
To fix CVE-2025-14619, sanitize and validate all user inputs in the login_query.php file to prevent SQL injection attacks.
What are the exploitation vectors for CVE-2025-14619?
CVE-2025-14619 can be exploited remotely by manipulating the 'stud_no' argument in the login_query.php script.
Which software is affected by CVE-2025-14619?
CVE-2025-14619 affects the code-projects Student File Management System version 1.0.
What could be the consequences of exploiting CVE-2025-14619?
Exploiting CVE-2025-14619 could lead to unauthorized access to the database, allowing attackers to retrieve, modify, or delete sensitive data.