CVE-2025-10594

24th percentile - higher than 24% of all known CVEs

A SQL Injection vulnerability was found in SourceCodester Online Student File Management System 1.0 in the file /admin/delete_student.php. By manipulating the stud_id argument, an attacker can execute arbitrary SQL queries. The vulnerability can be exploited remotely, and the exploit has been publicly disclosed.

An attacker could remotely access, modify, or delete student data. The publicly available exploit increases the risk of rapid exploitation.

Immediately update the application to a version containing the fix or implement input validation. Until then, restrict access to the administrative panel.