CVE-2025-9666

CWE-74CWE-89 — SQL InjectionCWE-284 — Improper Access ControlCWE-2904 documents4 sources
Severity
5.3MEDIUM
EPSS
0.0%
top 91.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Code-projects Simple Grading SystemFabian Simple Grading System
Timeline
PublishedAug 29

Description

A security vulnerability has been detected in code-projects Simple Grading System 1.0. Affected by this issue is some unknown functionality of the file /delete_student.php of the component Admin Panel. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

3
GHSA
GHSA-49qv-7x53-w42r: A security vulnerability has been detected in code-projects Simple Grading System 1↗2025-08-29
▶
CVEList
code-projects Simple Grading System Admin Panel delete_student.php sql injection↗2025-08-29
▶
GHSA
pyLoad is vulnerable to attacks that bypass localhost restrictions, enabling the creation of arbitrary packages↗2025-07-08
▶
CVE-2025-9666 (MEDIUM CVSS 5.3) | A security vulnerability has been d | cvebase.io