CVE-2025-0203
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Jan 4, 2025
Updated: Jan 22, 2025
CWE ID 74
CWE ID 89
Summary
CVE-2025-0203 is a critical vulnerability affecting the Student Management System 1.0, specifically the function showSubject1 in the file /config/DbFunction.php. This issue allows for sql injection by manipulating the argument sid. The exploit can be initiated remotely, making it a significant security concern. The vulnerability has been disclosed to the public, increasing the risk of potential attacks. Other parameters may also be susceptible to similar manipulation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Code Projects