CVE-2025-9662

CriticalCVSS 9.8/10Last modified Oct 18, 2026

Description

A vulnerability was determined in code-projects Simple Grading System 1.0. This affects an unknown function of the file /login.php of the component Admin Panel. Executing manipulation can lead to sql injection. The attack may be performed from a remote location. The exploit has been publicly disclosed and may be utilized.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Aug 29, 2025
Last modified
Oct 18, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-96638.8A vulnerability was identified in code-projects Simple Grading System 1.0. This impacts an unknown function of the file /edit_account.php ofCVE-2025-96648.8A security flaw has been discovered in code-projects Simple Grading System 1.0. Affected is an unknown function of the file /add_student_graCVE-2025-96658.8A weakness has been identified in code-projects Simple Grading System 1.0. Affected by this vulnerability is an unknown functionality of theCVE-2025-96668.8A security vulnerability has been detected in code-projects Simple Grading System 1.0. Affected by this issue is some unknown functionality CVE-2025-96678.8A vulnerability was detected in code-projects Simple Grading System 1.0. This affects an unknown part of the file /delete_account.php of theCVE-2025-96699.8A vulnerability has been found in Jinher OA 1.0. This issue affects some unknown processing of the file GetTreeDate.aspx. The manipulation oCVE-2025-96705.3A security flaw has been discovered in mixmark-io turndown up to 7.2.1. This affects an unknown function of the file src/commonmark-rules.jsCVE-2025-96715.3A weakness has been identified in UAB Paytend App up to 2.1.9 on Android. This impacts an unknown function of the file AndroidManifest.xml oCVE-2025-96725.3A security vulnerability has been detected in Rejseplanen App up to 8.2.2. Affected is an unknown function of the file AndroidManifest.xml oCVE-2025-96735.3A vulnerability was detected in Kakao 헤이카카오 Hey Kakao App up to 2.17.4 on Android. Affected by this vulnerability is an unknown functionalitCVE-2025-96745.5A flaw has been found in Transbyte Scooper News App up to 1.2 on Android. Affected by this issue is some unknown functionality of the file ACVE-2025-96755.5A vulnerability was determined in Voice Changer App up to 1.1.0. This issue affects some unknown processing of the file AndroidManifest.xml
CVE-2025-9662: Critical severity, CVSS 9.8 | Vulnix