CVE-2025-10418

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A weakness has been identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_students.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Sep 15, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-104198.8A security vulnerability has been detected in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionalit CVE-2025-10427.5An insecure direct object reference vulnerability in GitLab EE affecting all versions from 15.7 prior to 17.6.5, 17.7 prior to 17.7.4, and 1 CVE-2025-104208.8A vulnerability was detected in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /form137.php. Performing CVE-2025-104218.8A flaw has been found in SourceCodester Student Grading System 1.0. This vulnerability affects unknown code of the file /update_account.php.CVE-2025-104224.3A vulnerability has been found in newbee-mall up to 613a662adf1da7623ec34459bc83e3c1b12d8ce7. This issue affects the function paySuccess of CVE-2025-104233.7A vulnerability was found in newbee-mall 1.0. Impacted is the function mallKaptcha of the file /common/mall/kaptcha. The manipulation result CVE-2025-104249.8A vulnerability was determined in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The affected element is a CVE-2025-104259.8A vulnerability was identified in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The impacted element is a CVE-2025-104269.8A security flaw has been discovered in itsourcecode Online Laundry Management System 1.0. This affects an unknown function of the file /logi CVE-2025-104278.8A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/o CVE-2025-104288.8A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the fi CVE-2025-104298.8A vulnerability was detected in SourceCodester Pet Grooming Management Software 1.0. Affected by this vulnerability is an unknown functional