CVE-2025-1850: Codezips College Management System university.php sql injection
A vulnerability, which was classified as critical, has been found in Codezips College Management System 1.0. Affected by this issue is some unknown functionality of the file /university.php. The manipulation of the argument bookname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1850?
CVE-2025-1850 is classified as a critical severity vulnerability.
How does CVE-2025-1850 exploit vulnerabilities?
CVE-2025-1850 exploits SQL injection vulnerabilities through manipulation of the book_name argument in the /university.php file.
What impact can CVE-2025-1850 have on affected systems?
CVE-2025-1850 can allow attackers to execute arbitrary SQL queries, potentially leading to data leakage or loss.
What versions of the College Management System are affected by CVE-2025-1850?
CVE-2025-1850 affects Codezips College Management System 1.0.
How can I remediate CVE-2025-1850?
To remediate CVE-2025-1850, it is recommended to sanitize and validate user inputs for SQL queries in the application.