CNNVD-202511-2066 Information
CNNVD ID
CNNVD-202511-2066
Related CVE
- CNNVD Published: 2025-11-18
Description (Chinese)
SourceCodester Student Grades Management System是SourceCodester开源的一个学生成绩管理系统。 SourceCodester Student Grades Management System 1.0版本存在代码注入漏洞，该漏洞源于对文件/grades.php中参数Remarks的错误操作，可能导致跨站脚本攻击。
Description (English)
ServiceCodester Grades Management Systems is an open-source student achievement management system for ServiceCodester. SourceCodester Standard Management System Version 1.0 contains a code-injection loophole, which arises from a wrong operation on Remarks, the parameter in file/grades.php, which may result in a cross-stop script attack.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
SourceCodester
Published
2025-11-18
Last Modified
2026-02-24
References
https://vuldb.com/?id.332766 https://medium.com/@ankitkaushal43731/title-student-grades-management-system-stored-xss-authenticated-in-grades-php-remarks-field-d9625243df06 https://www.sourcecodester.com/ https://vuldb.com/?submit.692065 https://vuldb.com/?ctiid.332766 https://access.redhat.com/security/cve/cve-2025-13349
Share on: