kidaze CourseSelectionSystem COUNT3s5.php sql injection_CVE-2025-11052

6.9 / 10

MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Description

A security flaw has been discovered in kidaze CourseSelectionSystem 1.0/5.php. The impacted element is an unknown function of the file /Profilers/PriProfile/COUNT3s5.php. Performing manipulation of the argument csslc results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.

Basic Information

ID CVE-2025-11052

Source VulDB

Published Sep 27, 2025 at 07:02

Affected Product

Vendor kidaze

Product CourseSelectionSystem

Version 1.0

Affected Versions kidaze CourseSelectionSystem 1.0
kidaze CourseSelectionSystem 5.php

CWE Classification

CWE-89 CWE-74

References

{
    "lastseen": "",
    "description": "A security flaw has been discovered in kidaze CourseSelectionSystem 1.0/5.php. The impacted element is an unknown function of the file /Profilers/PriProfile/COUNT3s5.php. Performing manipulation of the argument csslc results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.",
    "published": "2025-09-27T07:02:06.610Z",
    "modified": "2025-09-27T07:02:06.610Z",
    "type": "cve",
    "title": "kidaze CourseSelectionSystem COUNT3s5.php sql injection",
    "source": "VulDB",
    "references": "https://vuldb.com/?id.326092\nhttps://vuldb.com/?ctiid.326092\nhttps://vuldb.com/?submit.659370\nhttps://github.com/xxxmingyue/cve/issues/1",
    "id": "CVE-2025-11052",
    "bulletinFamily": "",
    "cwe": [
        "CWE-89",
        "CWE-74"
    ],
    "cvelist": null,
    "sourceData": "kidaze CourseSelectionSystem 1.0\nkidaze CourseSelectionSystem 5.php",
    "sourceHref": "",
    "cvss": {
        "score": 6.9,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "CourseSelectionSystem",
    "version": "1.0",
    "vendor": "kidaze",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}