CVE-2025-9679 MEDIUM

CVE-2025-9679: itsourcecode Student Information System course_edit1.php sql injection

Vendor Itsourcecode
Product Student Information System
Weakness CWE-89 · SQLi
Published August 30, 2025
Last update September 2, 2025
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A security vulnerability has been detected in itsourcecode Student Information System 1.0. This affects an unknown function of the file /course_edit1.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

Key dates

02Disclosure timeline

August 30, 2025 CVE published
September 2, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-4815 Campcodes Sales and Inventory System supplier_update.php sql injection CVE-2026-3744 code-projects Student Web Portal signup.php valreg_passwdation sql injection CVE-2025-32565 WordPress Neon Product Designer Plugin <= 2.2.0 - Unauthenticated SQL Injection vulnerability CVE-2025-0462 Shanghai Lingdang Information Technology Lingdang CRM index.php sql injection CVE-2025-13264 SourceCodester Online Magazine Management System view_magazine.php sql injection