CVE-2025-13243 MEDIUM

CVE-2025-13243: code-projects Student Information System editprofile.php sql injection

Vendor Code-Projects

Product Student Information System

Weakness CWE-89 · SQLi

Published November 16, 2025

Last update November 17, 2025

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability was found in code-projects Student Information System 2.0. Impacted is an unknown function of the file /editprofile.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.

Key dates

02Disclosure timeline

November 16, 2025 CVE published

November 17, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-13243 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2023-47530 WordPress Redirect 404 Error Page to Homepage or Custom Page with Logs Plugin <= 1.8.7 is vulnerable to SQL Injection CVE-2025-10420 SourceCodester Student Grading System form137.php sql injection CVE-2023-0784 SourceCodester Best Online News Portal Login Page sql injection CVE-2025-32124 WordPress Behance Portfolio Manager plugin <= 1.7.5 - SQL Injection vulnerability CVE-2025-52823 WordPress Cube Portfolio Plugin <= 1.16.8 - SQL Injection Vulnerability