PT-2025-40938 · Unknown · Uniclare Student Portal

Anchitsahni · Published 2025-10-06 · Updated 2025-10-06 · CVE-2025-57515

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Uniclare Student Portal version 2

Description A SQL injection flaw exists in Uniclare Student Portal version 2. This allows remote attackers to inject arbitrary SQL commands through vulnerable input fields. Exploitation can involve executing time-delay functions to infer database responses. The vulnerability enables the execution of arbitrary SQL commands via vulnerable input fields.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-57515

Affected Products

Uniclare Student Portal

References · 6

• 🔥 https://github.com/sanchitsahni/CVE-2025-57515 · Exploit
• 🔥 https://github.com/sanchitsahni/CVE-2025-57515/blob/main/Uniclare%20Student%20Portal%20v2.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-57515 · Security Note
• https://t.me/CVEtracker/34269 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1975278689404301806 · Twitter Post
• https://twitter.com/CVEnew/status/1975271909571858565 · Twitter Post