← Database

CVE-2025-13289

MEDIUM CVSS: 6.3 Published: 2025-11-17 Modified: 2026-06-17

Description

A vulnerability was detected in 1000projects Design & Development of Student Database Management System 1.0. Affected is an unknown function of the file /TeacherLogin/Academics/SubjectDetails.php. The manipulation of the argument SubCode results in sql injection. The attack may be performed from remote. The exploit is now public and may be used.

Affected Platforms

1000Projects Design \& Development Of Student Database Management System

Weakness Type

CWE-74, CWE-89, CWE-89

References