CVE-2025-9665: code-projects Simple Grading System Admin Panel edit_student.php sql injection
A weakness has been identified in code-projects Simple Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /editstudent.php of the component Admin Panel. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9665?
CVE-2025-9665 is categorized as a critical severity vulnerability due to the potential for SQL injection attacks.
How do I fix CVE-2025-9665?
To fix CVE-2025-9665, sanitize and validate all user inputs to prevent SQL injection in the /edit_student.php script.
What types of attacks can be executed using CVE-2025-9665?
CVE-2025-9665 allows attackers to perform SQL injection, potentially leading to unauthorized data access or manipulation.
Which versions of Simple Grading System are affected by CVE-2025-9665?
CVE-2025-9665 affects all versions of the Simple Grading System 1.0.
What component is vulnerable in CVE-2025-9665?
The vulnerable component in CVE-2025-9665 is the Admin Panel, specifically the /edit_student.php file.