CNNVD-202506-2909 Information

Jun 22, 2025 cve

CNNVD ID

CNNVD-202506-2909

CVE-2025-6477

CNNVD Published: 2025-06-22

Description (Chinese)

SourceCodester Student Result Management System是SourceCodester开源的一个学生成绩管理系统。 SourceCodester Student Result Management System 1.0版本存在代码注入漏洞，该漏洞源于对文件/script/admin/system中参数School Name的错误操作导致跨站脚本攻击。

Description (English)

ServiceCodester Standard Research Management System is an open-source student achievement management system for ServiceCodester. Version 1.0 of SourceCodester Standard Management System has a code insertion loophole that results from an error in the School Name parameter in document/script/admin/system.

Hazard Level

Critical

Vulnerability Type

代码注入

Affected Vendor

SourceCodester

Published

2025-06-22

Last Modified

2026-02-24

References

https://vuldb.com/?submit.600559 https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README9.md https://vuldb.com/?ctiid.313585 https://www.sourcecodester.com/ https://vuldb.com/?id.313585 https://access.redhat.com/security/cve/cve-2025-6477

Share on: