ГлавнаяУязвимости → CVE-2025-10479
7.3высокая

CVE-2025-10479

Описание

A security flaw has been discovered in SourceCodester Online Student File Management System 1.0. The impacted element is an unknown function of the file /index.php. Performing manipulation of the argument stud_no results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.

Затрагиваемое ПО
Janobe Online student file management system
CVSS
Балл7.3 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Источники
https://github.com/ganzhi-qcy/cve/issues/25https://vuldb.com/?ctiid.323914https://vuldb.com/?id.323914https://vuldb.com/?submit.648520https://www.sourcecodester.com/https://github.com/ganzhi-qcy/cve/issues/25