A security flaw has been discovered in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /update_program.php. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.
References
| Link | Resource |
|---|---|
| https://github.com/ltranquility/CVE/issues/24 | Exploit Issue Tracking Third Party Advisory |
| https://itsourcecode.com/ | Product |
| https://vuldb.com/?ctiid.336208 | Permissions Required VDB Entry |
| https://vuldb.com/?id.336208 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.707081 | Third Party Advisory VDB Entry |
Configurations
History
18 Dec 2025, 02:29
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Angeljudesuarez student Management System
Angeljudesuarez |
|
| CPE | cpe:2.3:a:angeljudesuarez:student_management_system:1.0:*:*:*:*:*:*:* | |
| References | () https://github.com/ltranquility/CVE/issues/24 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://itsourcecode.com/ - Product | |
| References | () https://vuldb.com/?ctiid.336208 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.336208 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.707081 - Third Party Advisory, VDB Entry |
13 Dec 2025, 16:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-13 16:16
Updated : 2025-12-18 02:29
NVD link : CVE-2025-14588
Mitre link : CVE-2025-14588
CVE.ORG link : CVE-2025-14588
JSON object : View
Products Affected
angeljudesuarez
- student_management_system