CVE-2025-9662

CriticalCVSS 9.8/10Last modified Oct 18, 2026

Description

A vulnerability was determined in code-projects Simple Grading System 1.0. This affects an unknown function of the file /login.php of the component Admin Panel. Executing manipulation can lead to sql injection. The attack may be performed from a remote location. The exploit has been publicly disclosed and may be utilized.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
code-projects	Simple Grading System	1.0

References

https://code-projects.org/Product
https://vuldb.com/?ctiid.321869Permissions Required, VDB Entry
https://vuldb.com/?id.321869Third Party Advisory, VDB Entry
https://vuldb.com/?submit.637252Third Party Advisory, VDB Entry
https://www.yuque.com/yuqueyonghuexlgkz/zepczx/ni7wnpx934yx9w9n?singleDocExploit, Third Party Advisory

Timeline

Published: Aug 29, 2025
Last modified: Oct 18, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-96638.8A vulnerability was identified in code-projects Simple Grading System 1.0. This impacts an unknown function of the file /edit_account.php of CVE-2025-96648.8A security flaw has been discovered in code-projects Simple Grading System 1.0. Affected is an unknown function of the file /add_student_gra CVE-2025-96658.8A weakness has been identified in code-projects Simple Grading System 1.0. Affected by this vulnerability is an unknown functionality of the CVE-2025-96668.8A security vulnerability has been detected in code-projects Simple Grading System 1.0. Affected by this issue is some unknown functionality CVE-2025-96678.8A vulnerability was detected in code-projects Simple Grading System 1.0. This affects an unknown part of the file /delete_account.php of the CVE-2025-96699.8A vulnerability has been found in Jinher OA 1.0. This issue affects some unknown processing of the file GetTreeDate.aspx. The manipulation o CVE-2025-96705.3A security flaw has been discovered in mixmark-io turndown up to 7.2.1. This affects an unknown function of the file src/commonmark-rules.js CVE-2025-96715.3A weakness has been identified in UAB Paytend App up to 2.1.9 on Android. This impacts an unknown function of the file AndroidManifest.xml o CVE-2025-96725.3A security vulnerability has been detected in Rejseplanen App up to 8.2.2. Affected is an unknown function of the file AndroidManifest.xml o CVE-2025-96735.3A vulnerability was detected in Kakao 헤이카카오 Hey Kakao App up to 2.17.4 on Android. Affected by this vulnerability is an unknown functionalit CVE-2025-96745.5A flaw has been found in Transbyte Scooper News App up to 1.2 on Android. Affected by this issue is some unknown functionality of the file A CVE-2025-96755.5A vulnerability was determined in Voice Changer App up to 1.1.0. This issue affects some unknown processing of the file AndroidManifest.xml