CNNVD-202509-1964 Information
CNNVD ID
CNNVD-202509-1964
Related CVE
- CNNVD Published: 2025-09-15
Description (Chinese)
SourceCodester Online Student File Management是SourceCodester开源的一个在线学生档案管理系统。 SourceCodester Online Student File Management 1.0版本存在SQL注入漏洞，该漏洞源于对文件/admin/save_user.php中参数firstname的错误操作，可能导致SQL注入攻击。
Description (English)
SourceCodester Online File Management is an online student file management system, an open source for ServiceCodester. SourceCodester Online File Management Version 1.0 contains an injection loophole in SQL, which stems from an error in the use of the parameter firstname in the document/admin/save user.php, which may lead to an attack on SQL injection.
Hazard Level
High
Vulnerability Type
SQL注入
Affected Vendor
Sparkle Motion
Published
2025-09-15
Last Modified
2026-02-24
References
https://github.com/qcycop0101-hash/CVE/issues/12 https://vuldb.com/?id.323918 https://vuldb.com/?ctiid.323918 https://vuldb.com/?submit.648597 https://www.sourcecodester.com/ https://access.redhat.com/security/cve/cve-2025-10483
Share on: