Findings

CVE-2025-14337

A vulnerability was determined in itsourcecode Student Management System 1.0.

Published Dec 9, 2025 · updated Oct 14, 2026 · angeljudesuarez student management system

A vulnerability was determined in itsourcecode Student Management System 1.0. This affects an unknown part of the file /new_grade.php. This manipulation of the argument grade causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 9, 2025 · NIST NVD

    Detected

    A vulnerability was determined in itsourcecode Student Management System 1.0. This affects an unknown part of the file /new_grade.php. This manipulation of the argument grade causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A vulnerability was determined in itsourcecode Student Management System 1.0. This affects an unknown part of the file /new_grade.php. This manipulation of the argument grade causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Affected

  • cpe angeljudesuarez/student management system1.0

Sources

  • CVE.orgVulnerability recordCVE-2025-14337

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2025-14337

    30-day exploitation probability 0.4%

    first.org
  • NIST NVDVulnerability recordCVE-2025-14337

    A vulnerability was determined in itsourcecode Student Management System 1.0. This affects an unknown part of the file /new_grade.php. This manipulation of the argument grade causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and m

    nvd.nist.gov

References