CVE-2025-6403: code-projects School Fees Payment System student.php sql injection

Published Jun 21, 2025

Updated

A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects School Fees Payment System

Fabian School Fees Payment System=1.0

Event History

Jun 21, 2025

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 AM

DescriptionSeverityWeaknessAffected Software

Jun 13, 58473

Event

via NVD·07:45 AM

Frequently Asked Questions

What is the severity of CVE-2025-6403?

CVE-2025-6403 has been rated as critical due to its potential for SQL injection.

How does CVE-2025-6403 affect the School Fees Payment System?

CVE-2025-6403 affects the processing of the file /student.php, leading to SQL injection vulnerabilities.

Who can exploit the CVE-2025-6403 vulnerability?

The CVE-2025-6403 vulnerability can be exploited remotely by attackers.

What is the exploitation method for CVE-2025-6403?

The exploitation method for CVE-2025-6403 involves manipulating the argument ID to execute SQL injection attacks.

What steps should be taken to mitigate CVE-2025-6403?

To mitigate CVE-2025-6403, it is essential to sanitize input values and employ prepared statements for SQL queries.