CVE-2025-14640: code-projects Student File Management System save_student.php sql injection
A flaw has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /admin/savestudent.php. Executing manipulation of the argument studno can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14640?
CVE-2025-14640 is categorized as a high severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2025-14640?
To fix CVE-2025-14640, validate and sanitize user input in the stud_no parameter in the /admin/save_student.php file.
Who is affected by CVE-2025-14640?
CVE-2025-14640 affects users of Code-projects Student File Management System version 1.0.
Can CVE-2025-14640 be exploited remotely?
Yes, CVE-2025-14640 can be exploited remotely through crafted requests targeting the vulnerable function.
What are the implications of exploiting CVE-2025-14640?
Exploiting CVE-2025-14640 can lead to unauthorized database access, data leakage, and potential data manipulation.