CVE-2025-14639: itsourcecode Student Management System uprec.php sql injection
A vulnerability was detected in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /uprec.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14639?
CVE-2025-14639 has a severity rating that indicates a significant risk due to SQL injection vulnerabilities allowing remote exploitation.
How do I fix CVE-2025-14639?
To fix CVE-2025-14639, you should sanitize the input parameters of the /uprec.php file to prevent SQL injection.
What systems are affected by CVE-2025-14639?
CVE-2025-14639 affects itsourcecode Student Management System version 1.0.
Can CVE-2025-14639 be exploited remotely?
Yes, CVE-2025-14639 can be exploited remotely by an attacker manipulating the argument ID.
What type of vulnerability is CVE-2025-14639?
CVE-2025-14639 is classified as a SQL injection vulnerability.