CVE-2025-9679: itsourcecode Student Information System course_edit1.php sql injection
Published Aug 30, 2025
·Updated
A security vulnerability has been detected in itsourcecode Student Information System 1.0. This affects an unknown function of the file /courseedit1.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Affected Software
2 affected components
itsourcecode Student Information System
Facebook-julykringcadayona Student Information System=1.0
Event History
Aug 30, 2025
CVE Published
via MITRE·04:32 AM
Data Sourced
via MITRE·04:32 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 AM
DescriptionSeverityWeaknessAffected Software
Feb 27, 57989
Event
via FIRST·09:39 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-9679?
CVE-2025-9679 has a medium severity rating due to the potential for SQL injection attacks.
2
How do I fix CVE-2025-9679?
Fix CVE-2025-9679 by validating and sanitizing user inputs in the affected file /course_edit1.php to prevent SQL injection.
3
What components are affected by CVE-2025-9679?
CVE-2025-9679 impacts the itsourcecode Student Information System version 1.0.
4
Can CVE-2025-9679 be exploited remotely?
Yes, CVE-2025-9679 can be exploited remotely by manipulating the argument ID.
5
What type of vulnerability is CVE-2025-9679?
CVE-2025-9679 is classified as an SQL injection vulnerability.