CVE-2025-15205
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
A vulnerability was identified in code-projects Student File Management System 1.0. It affects an unknown functionality in the file /download.php. Manipulation of the argument istore_id leads to SQL injection. The attack can be initiated remotely, and the exploit is publicly available.
Risk Assessment
The organization may be exposed to SQL injection, potentially allowing an attacker to access sensitive data or compromise system security.
Recommendation
It is recommended to apply patches or upgrade the system immediately, and to validate input data to prevent SQL injection attacks.
Other vulnerabilities in Student File Management System
See all- CVE-2025-14663Low
A vulnerability was determined in code-projects Student File Management System 1.0. Manipulation in the file /admin/update_student.php leads to cross site scripting. The attack may be launched remotely and the exploit has been publicly disclosed.
- CVE-2025-14662Low
A vulnerability was found in code-projects Student File Management System 1.0. It affects an unknown part of the file /admin/update_user.php in the Update User Page component. Manipulation leads to cross site scripting. The attack may be initiated remotely and the exploit has been made public.
Original NVD description (English source)
A vulnerability was identified in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /download.php. The manipulation of the argument istore_id leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS