CVE-2025-14620: code-projects Student File Management System login_query.php sql injection
A vulnerability was determined in code-projects Student File Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/loginquery.php. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14620?
The severity of CVE-2025-14620 is considered high due to its potential for SQL injection.
How do I fix CVE-2025-14620?
To fix CVE-2025-14620, sanitize and parameterize all user inputs, particularly the 'Username' variable.
Can CVE-2025-14620 be exploited remotely?
Yes, CVE-2025-14620 can be exploited remotely by manipulating the 'Username' parameter.
What software is affected by CVE-2025-14620?
CVE-2025-14620 affects the code-projects Student File Management System version 1.0.
What type of vulnerability is CVE-2025-14620?
CVE-2025-14620 is a SQL injection vulnerability that allows attackers to execute arbitrary queries against the database.