DFIR Lab@DFIR_Lab
🚨 HIGH: CVE-2025-14646 (CVSS 7.3) - SQL Injection in Student File Management System 1.0. Remote exploit publicly available. Patch immediately. #CVE #PatchNow #ThreatIntel https://t.co/wgitQHXjol
0000020
144 followersView on X
CVE-2025-14646(fabian / student_file_management_system)
LOWCVSS 9.8 · CRITICALSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
A security flaw has been discovered in code-projects Student File Management System 1.0. This impacts an unknown function of the file /admin/delete_student.php. The manipulation of the argument stud_id results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be exploited.
0.0/ 10 priority
Sources & remediation
Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-74CWE-89
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- student_file_management_system
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day
Affected systems
Vendors
Products
student_file_management_system
1 version affected across 1 product
Deep dive
Activity timeline1 mentions / 1d
Full discourse1 post
CPE platform detail1 entries
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | fabian | student_file_management_system | 1.0 | - | - |