← Database

CVE-2025-13298

HIGH CVSS: 7.3 Published: 2025-11-17 Modified: 2026-06-17

Description

A vulnerability was detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. This affects an unknown function of the file /enrollment/controller.php. Performing a manipulation results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Affected Platforms

Itsourcecode Web-Based Internet Laboratory Management System

Weakness Type

CWE-74, CWE-89, CWE-89

References