CVE-2025-14639 MEDIUM

CVE-2025-14639: itsourcecode Student Management System uprec.php sql injection

Vendor Itsourcecode

Product Student Management System

Weakness CWE-89 · SQLi

Published December 14, 2025

Last update December 15, 2025

View on NVD All CVEs

CVSS base score

6.9/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability was detected in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /uprec.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used.

Key dates

02Disclosure timeline

December 14, 2025 CVE published

December 15, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-14639

Related vulnerabilities

04Related CVE

CVE-2025-11118 CodeAstro Student Grading System adminLogin.php sql injection CVE-2024-2272 keerti1924 Online-Book-Store-Website HTTP POST Request home.php sql injection CVE-2024-0355 PHPGurukul Dairy Farm Shop Management System add-category.php sql injection CVE-2026-3790 SourceCodester Sales and Inventory System POST Parameter check_supplier_details.php sql injection CVE-2025-3335 codeprojects Online Restaurant Management System category_update.php sql injection