CVE-2025-14622: code-projects Student File Management System save_user.php sql injection
A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/saveuser.php. The manipulation of the argument firstname results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14622?
CVE-2025-14622 has been classified as a high-severity vulnerability due to its potential for remote exploitation via SQL injection.
How do I fix CVE-2025-14622?
To fix CVE-2025-14622, sanitize and validate all user inputs in the /admin/save_user.php file to prevent SQL injection.
What type of vulnerability is CVE-2025-14622?
CVE-2025-14622 is an SQL injection vulnerability that allows attackers to manipulate database queries through unsanitized input.
Which software is affected by CVE-2025-14622?
CVE-2025-14622 affects the Code-projects Student File Management System version 1.0.
Can CVE-2025-14622 be exploited remotely?
Yes, CVE-2025-14622 can be exploited remotely, allowing attackers to execute unauthorized SQL commands.