CVE-2025-14336
A vulnerability was found in itsourcecode Student Management System 1.0.
Published Dec 9, 2025 · updated Oct 14, 2026 · angeljudesuarez student management system
A vulnerability was found in itsourcecode Student Management System 1.0. Affected by this issue is some unknown functionality of the file /promote.php. The manipulation of the argument sy results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Timeline
Detection, updates, and resolution for this record.
Dec 9, 2025 · NIST NVD
Detected
A vulnerability was found in itsourcecode Student Management System 1.0. Affected by this issue is some unknown functionality of the file /promote.php. The manipulation of the argument sy results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Oct 14, 2026 · NIST NVD
Updated
A vulnerability was found in itsourcecode Student Management System 1.0. Affected by this issue is some unknown functionality of the file /promote.php. The manipulation of the argument sy results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Affected
- cpe angeljudesuarez/student management system1.0
Sources
- CVE.orgCVE-2025-14336
Official CVE identifier
cve.org - FIRST EPSSCVE-2025-14336
30-day exploitation probability 0.4%
first.org - NIST NVDCVE-2025-14336
A vulnerability was found in itsourcecode Student Management System 1.0. Affected by this issue is some unknown functionality of the file /promote.php. The manipulation of the argument sy results in sql injection. It is possible to launch the attack remotely. The exploit has been
nvd.nist.gov