CVE-2025-3205: CodeAstro Student Grading System studentsubject.php sql injection
Published Apr 4, 2025
·Updated
A vulnerability, which was classified as critical, was found in CodeAstro Student Grading System 1.0. This affects an unknown part of the file studentsubject.php. The manipulation of the argument studentId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Codeastro Student Grading System
Codeastro Student Grading System=1.0
Event History
Apr 4, 2025
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeakness
Oct 29, 57230
Event
via FIRST·01:54 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-3205?
CVE-2025-3205 is classified as a critical vulnerability.
2
How does CVE-2025-3205 occur?
CVE-2025-3205 occurs due to SQL injection via manipulation of the studentId argument in studentsubject.php.
3
Who is affected by CVE-2025-3205?
CVE-2025-3205 affects users of CodeAstro Student Grading System version 1.0.
4
Can CVE-2025-3205 be exploited remotely?
Yes, CVE-2025-3205 can be exploited remotely.
5
How can I fix CVE-2025-3205?
To fix CVE-2025-3205, it is recommended to validate and sanitize user inputs to prevent SQL injection.