CVE-2025-50585
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
A SQL injection vulnerability was discovered in StudentManage v1.0 within the /admin/adminStudentUrl component. An attacker can exploit this flaw to manipulate database queries.
Risk Assessment
The risk includes unauthorized access to student data, modification, or deletion, potentially compromising system confidentiality and integrity.
Recommendation
Immediately update the system to the latest version or apply a security patch. Additionally, implement parameterized SQL queries and input validation.
Other vulnerabilities in StudentManage
See all- CVE-2025-50583Medium
StudentManage v1.0 was found to contain a cross-site scripting (XSS) vulnerability in the Add A New Student module. This allows an attacker to inject malicious scripts into the page.
- CVE-2025-50582Medium
StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add A New Course module. This allows an attacker to inject malicious scripts into the page.
- CVE-2025-50584Medium
StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add A New Teacher module. This allows an attacker to inject malicious scripts into the web page.
- CVE-2025-50586Medium
StudentManage v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability. This allows an attacker to perform unauthorized actions on behalf of an authenticated user.
Original NVD description (English source)
StudentManage v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/adminStudentUrl.