CVE-2025-14621: code-projects Student File Management System update_user.php sql injection
A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/updateuser.php. The manipulation of the argument userid leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14621?
CVE-2025-14621 has a high severity level due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-14621?
To fix CVE-2025-14621, sanitize and validate the user_id parameter to prevent SQL injection.
What software is affected by CVE-2025-14621?
CVE-2025-14621 affects the Student File Management System version 1.0 developed by code-projects.
Can CVE-2025-14621 be exploited remotely?
Yes, CVE-2025-14621 can be exploited remotely, making it a critical concern for web application security.
What kind of attack is associated with CVE-2025-14621?
CVE-2025-14621 is associated with SQL injection attacks that manipulate the user_id argument.