CVE-2025-10593 in Online Student File Management System

Résumé

par MITRE • 17/09/2025

A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/update_student.php. Performing manipulation of the argument stud_id results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: VulDB
• Divulgation: 17/09/2025
• Modérer: accepté
• Entrée: VDB-324610
• CPE: prêt
• CWE: CWE-89 (confirmé)
• Exploitation: Télécharger
• CVSS: 8.8 (NVD)
• EPSS: 0.00285
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-10593
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-10593
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-10593/