Vulnerability Description
A weakness has been identified in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /update_account.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Angeljudesuarez | Student Management System | 1.0 |
Related Weaknesses (CWE)
References
- https://github.com/ltranquility/CVE/issues/23ExploitIssue TrackingThird Party Advisory
- https://itsourcecode.com/Product
- https://vuldb.com/?ctiid.336200Permissions RequiredVDB Entry
- https://vuldb.com/?id.336200Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.704794Third Party AdvisoryVDB Entry
FAQ
What is CVE-2025-14578?
CVE-2025-14578 is a vulnerability with a CVSS score of 7.3 (HIGH). A weakness has been identified in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /update_account.php. This manipulation of the argument ID causes s...
How severe is CVE-2025-14578?
CVE-2025-14578 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-14578?
Check the references section above for vendor advisories and patch information. Affected products include: Angeljudesuarez Student Management System.