CVE-2025-44135: SQL Injection
Published Apr 24, 2025
·Updated
A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 in /Scheduling/pages/profileupdate.php. Manipulating the parameter username will cause SQL injection attacks.
Affected Software
2 affected components
Code-projects Online Class and Exam Scheduling System
Code-projects Online Class and Exam Scheduling System=1.0
Event History
Apr 24, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Oct 8, 57345
Event
via FIRST·06:26 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-44135?
CVE-2025-44135 has a high severity due to the potential for SQL injection vulnerabilities.
2
How do I fix CVE-2025-44135?
To fix CVE-2025-44135, sanitize and parameterize the input for the username parameter in the profile_update.php file.
3
What type of attack does CVE-2025-44135 enable?
CVE-2025-44135 enables SQL injection attacks that can lead to unauthorized access to the database.
4
Which component of the software is impacted by CVE-2025-44135?
CVE-2025-44135 impacts the /Scheduling/pages/profile_update.php file of the Online Class and Exam Scheduling System.
5
Is CVE-2025-44135 easy to exploit?
Yes, CVE-2025-44135 is relatively easy to exploit if input validations are not properly implemented.