CVE-2025-9837: itsourcecode Student Information Management System index.php sql injection
A vulnerability was determined in itsourcecode Student Information Management System 1.0. This issue affects some unknown processing of the file /admin/modules/student/index.php. This manipulation of the argument studentId causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9837?
CVE-2025-9837 is considered a high severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2025-9837?
To fix CVE-2025-9837, validate and sanitize all user inputs, particularly the 'studentId' parameter in the /admin/modules/student/index.php file.
Who is affected by CVE-2025-9837?
CVE-2025-9837 affects users of the itsourcecode Student Information Management System version 1.0.
Can CVE-2025-9837 be exploited remotely?
Yes, CVE-2025-9837 can be exploited remotely, allowing attackers to manipulate the studentId argument.
What type of attack is associated with CVE-2025-9837?
CVE-2025-9837 is associated with SQL injection attacks due to improper handling of user input.