Unknown · Code-Projects Student Information System · CVE-2025-13240
**Name of the Vulnerable Software and Affected Versions**
Code-Projects Student Information System version 2.0
**Description**
A flaw exists in Code-Projects Student Information System 2.0 related to SQL injection. The issue is located in the /searchquery.php file, where manipulation of the `s` argument can lead to exploitation. Remote exploitation is possible. The exploit is publicly available.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.