CVE-2025-14661: itsourcecode Student Managemen System advisers.php sql injection
A vulnerability has been found in itsourcecode Student Managemen System 1.0. Affected by this issue is some unknown functionality of the file /advisers.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14661?
CVE-2025-14661 is a critical vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-14661?
To fix CVE-2025-14661, ensure that input validation and parameterized queries are implemented to prevent SQL injection.
What are the potential impacts of CVE-2025-14661?
The potential impacts of CVE-2025-14661 include unauthorized database access, data leakage, and data manipulation.
Is CVE-2025-14661 easy to exploit?
Yes, CVE-2025-14661 can be exploited remotely, making it accessible to attackers with minimal technical skills.
Which systems are affected by CVE-2025-14661?
CVE-2025-14661 affects versions of the itsourcecode Student Management System software.