CVE-2025-15168 – itsourcecode Student Management System statistical.php sql injection

CVE ID : CVE-2025-15168

Published : Dec. 29, 2025, 3:15 a.m. | 1 hour, 7 minutes ago

Description : A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.

Severity: 7.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…