CVE-2025-14950 — Injection in Scholars Tracking System

CWE-74 — InjectionCWE-89 — SQL Injection3 documents3 sources
Severity
6.9MEDIUMNVD
EPSS
0.0%
top 88.50%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Code-projects Scholars Tracking SystemFabian Scholars Tracking System
Timeline
PublishedDec 19

Description

A weakness has been identified in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /delete_post.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
code-projects Scholars Tracking System delete_post.php sql injection↗2025-12-19
▶
GHSA
GHSA-9q4p-xjj8-72mp: A weakness has been identified in code-projects Scholars Tracking System 1↗2025-12-19
▶
CVE-2025-14950 — Injection in Scholars Tracking System | cvebase