CVE-2025-9238CWE-74CWE-89

Swatadru Exam-Seating-Arrangement Student Login student.php sql injection

Medium · published August 20, 2025

CVSS v4.0
6.9
EPSS
0%
Percentile
26.4
In the wild
Unconfirmed
What it is

A vulnerability was determined in Swatadru Exam-Seating-Arrangement up to 97335ccebf95468d92525f4255a2241d2b0b002f. Affected is an unknown function of the file /student.php of the component Student Login. Executing manipulation of the argument email can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00341 · 26.4th percentile
Weaknesses
CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'); CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2025-08-20T18:02Z
EPSS history
Timeline
  • 20 AUG 18:02Z
    Swatadru Exam-Seating-Arrangement Student Login student.php sql injection
    cvelistv5