CVE-2025-15075: itsourcecode Student Management System student_p.php sql injection
Published Dec 25, 2025
·Updated
A security flaw has been discovered in itsourcecode Student Management System 1.0. This issue affects some unknown processing of the file /studentp.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.
Affected Software
2 affected components
itsourcecode Student Management System
Angeljudesuarez Student Management System=1.0
Event History
Dec 25, 2025
CVE Published
via MITRE·03:02 AM
Data Sourced
via MITRE·03:02 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-15075?
CVE-2025-15075 is considered a high severity vulnerability due to its potential for remote SQL injection.
2
How do I fix CVE-2025-15075?
To fix CVE-2025-15075, ensure that all user inputs are properly sanitized and validated before being processed.
3
What systems are affected by CVE-2025-15075?
CVE-2025-15075 affects the itsourcecode Student Management System version 1.0.
4
Can CVE-2025-15075 be exploited remotely?
Yes, CVE-2025-15075 can be exploited remotely by manipulating the argument ID.
5
What type of vulnerability is CVE-2025-15075?
CVE-2025-15075 is an SQL injection vulnerability.