CVE-2025-14646: code-projects Student File Management System delete_student.php sql injection
A security flaw has been discovered in code-projects Student File Management System 1.0. This impacts an unknown function of the file /admin/deletestudent.php. The manipulation of the argument studid results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14646?
CVE-2025-14646 has been classified as a critical vulnerability due to its potential for SQL injection.
How do I fix CVE-2025-14646?
To fix CVE-2025-14646, ensure proper parameterized queries and input validation for the stud_id parameter in the delete_student.php file.
Which software is affected by CVE-2025-14646?
CVE-2025-14646 affects the Code-projects Student File Management System version 1.0.
Can CVE-2025-14646 be exploited remotely?
Yes, CVE-2025-14646 can be exploited remotely through SQL injection.
What function of the software does CVE-2025-14646 impact?
CVE-2025-14646 impacts the /admin/delete_student.php function of the Student File Management System.