CVE-2025-0203

Summary

CVE-2025-0203 is a critical vulnerability affecting the Student Management System 1.0 by code-projects. The issue lies within the function showSubject1 in the /config/DbFunction.php file, where the argument sid is susceptible to sql injection. This allows remote attackers to manipulate queries and potentially gain unauthorized access to sensitive data or perform further malicious actions. The exploit for this vulnerability has already been disclosed to the public, increasing the risk for potential attacks. Additional parameters may also be at risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.