6.9
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Description
A flaw has been found in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /new_adviser.php. Executing manipulation of the argument Name can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.
Basic Information
ID
CVE-2025-14334
Source
VulDB
Published
Dec 9, 2025 at 18:32
Affected Product
Vendor
itsourcecode
Product
Student Management System
Version
1.0
Affected Versions
itsourcecode Student Management System 1.0