CVE-2025-14645

Name of the Vulnerable Software and Affected Versions code-projects Student File Management System version 1.0

Description A flaw exists in the Student File Management System that allows for remote code execution. The issue is located in the file /admin/delete user.php and involves the manipulation of the user id argument, leading to a SQL injection. The exploit is publicly available. The vulnerable function is unknown.

Recommendations Apply a fix to address the SQL injection issue in the /admin/delete user.php file. Sanitize the user id argument to prevent SQL injection attacks. As a temporary workaround, restrict access to the /admin/delete user.php file.