CVE-2025-14645: code-projects Student File Management System delete_user.php sql injection
A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown function of the file /admin/deleteuser.php. The manipulation of the argument userid leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14645?
CVE-2025-14645 is classified as a high severity vulnerability due to its potential for remote exploitation via SQL injection.
How do I fix CVE-2025-14645?
To remediate CVE-2025-14645, validate and sanitize user inputs in the delete_user.php file to prevent SQL injection.
Who is affected by CVE-2025-14645?
Users of the code-projects Student File Management System version 1.0 are affected by CVE-2025-14645.
What type of vulnerability is CVE-2025-14645?
CVE-2025-14645 is an SQL injection vulnerability that can be exploited through the user_id parameter.
Can CVE-2025-14645 be exploited remotely?
Yes, CVE-2025-14645 can be exploited remotely, allowing attackers to manipulate database queries.