CVE-2025-14644: itsourcecode Student Management System update_subject.php sql injection
A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /updatesubject.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14644?
CVE-2025-14644 has been classified as a high severity vulnerability due to its potential for remote SQL injection.
How do I fix CVE-2025-14644?
To fix CVE-2025-14644, validate and sanitize all user inputs in the /update_subject.php file to prevent SQL injection attacks.
Who is affected by CVE-2025-14644?
CVE-2025-14644 affects users of the itsourcecode Student Management System version 1.0.
Can CVE-2025-14644 be exploited remotely?
Yes, CVE-2025-14644 can be exploited remotely through manipulation of the argument ID.
What type of vulnerability is CVE-2025-14644?
CVE-2025-14644 is an SQL injection vulnerability found in the itsourcecode Student Management System.