CVE-2025-9663: code-projects Simple Grading System Admin Panel edit_account.php sql injection
A vulnerability was identified in code-projects Simple Grading System 1.0. This impacts an unknown function of the file /editaccount.php of the component Admin Panel. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9663?
CVE-2025-9663 has been classified as a critical SQL injection vulnerability affecting the Admin Panel of the Simple Grading System.
How do I fix CVE-2025-9663?
To mitigate CVE-2025-9663, sanitize and validate all user inputs and use prepared statements to prevent SQL injection.
What software is affected by CVE-2025-9663?
CVE-2025-9663 affects the Simple Grading System version 1.0 developed by code-projects.
Can CVE-2025-9663 be exploited remotely?
Yes, CVE-2025-9663 can be exploited remotely due to improper handling of input in the /edit_account.php file.
What type of vulnerability is CVE-2025-9663?
CVE-2025-9663 is an SQL injection vulnerability that allows attackers to manipulate database queries.