Unknown · Simple Grading System · CVE-2025-9667
**Name of the Vulnerable Software and Affected Versions**
Simple Grading System version 1.0
**Description**
A SQL injection issue exists in the Admin Panel component of the software, specifically within the `/delete account.php` file. Manipulation of the `ID` argument can trigger the issue, allowing for remote exploitation. The exploit is publicly available.
**Recommendations**
As a temporary workaround, consider restricting access to the `/delete account.php` file until a fix is available.
Sanitize the `ID` parameter before using it in SQL queries.