CVE-2025-15077: itsourcecode Student Management System form137.php sql injection
A security vulnerability has been detected in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /form137.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15077?
CVE-2025-15077 is classified as a medium severity vulnerability due to the potential for SQL injection.
How do I fix CVE-2025-15077?
To fix CVE-2025-15077, sanitize and validate the ID parameter in the /form137.php file to prevent SQL injection.
What type of attack can occur from CVE-2025-15077?
CVE-2025-15077 allows for remote SQL injection attacks which can lead to unauthorized access to the database.
Which software is affected by CVE-2025-15077?
CVE-2025-15077 affects the itsourcecode Student Management System 1.0.
Is it possible to exploit CVE-2025-15077 remotely?
Yes, CVE-2025-15077 can be exploited remotely through crafted requests to the vulnerable endpoint.