CVE-2025-14337
A vulnerability was determined in itsourcecode Student Management System 1.0.
Published Dec 9, 2025 · updated Oct 14, 2026 · angeljudesuarez student management system
A vulnerability was determined in itsourcecode Student Management System 1.0. This affects an unknown part of the file /new_grade.php. This manipulation of the argument grade causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Dec 9, 2025 · NIST NVD
Detected
A vulnerability was determined in itsourcecode Student Management System 1.0. This affects an unknown part of the file /new_grade.php. This manipulation of the argument grade causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Oct 14, 2026 · NIST NVD
Updated
A vulnerability was determined in itsourcecode Student Management System 1.0. This affects an unknown part of the file /new_grade.php. This manipulation of the argument grade causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Affected
- cpe angeljudesuarez/student management system1.0
Sources
- CVE.orgVulnerability recordCVE-2025-14337
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2025-14337
30-day exploitation probability 0.4%
first.org - NIST NVDVulnerability recordCVE-2025-14337
A vulnerability was determined in itsourcecode Student Management System 1.0. This affects an unknown part of the file /new_grade.php. This manipulation of the argument grade causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and m
nvd.nist.gov