CVE-2025-9665 — Injection in Simple Grading System

CWE-74 — Injection CWE-89 — SQL Injection3 documents3 sources

Severity

5.3MEDIUMNVD

EPSS

0.0%

top 87.85%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Code-projects Simple Grading System Fabian Simple Grading System

Timeline

PublishedAug 29

Description

A weakness has been identified in code-projects Simple Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit_student.php of the component Admin Panel. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5code-projects/simple_grading_system1.0

▶NVDfabian/simple_grading_system1.0

🔴Vulnerability Details

GHSA

GHSA-p7xr-742m-rrg9: A weakness has been identified in code-projects Simple Grading System 1↗2025-08-29

▶

CVEList

code-projects Simple Grading System Admin Panel edit_student.php sql injection↗2025-08-29

▶