PT-2025-41752 · Unknown · Projectsandprograms School Management System

Qingyuan Qin + 1 · Published 2025-10-13 · Updated 2025-10-18 · CVE-2025-11661

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ProjectsAndPrograms School Management System versions prior to commit hash 6b6fae5426044f89c08d0dd101c7fa71f9042a59

Description A flaw exists in ProjectsAndPrograms School Management System that allows attackers to bypass authentication. This is achieved through manipulation of the system and can be carried out remotely. The exploit has been made public.

Recommendations Update ProjectsAndPrograms School Management System to a version beyond commit hash 6b6fae5426044f89c08d0dd101c7fa71f9042a59.

Exploit

Fix

Missing Authentication

Improper Authentication

Weakness Enumeration

CWE-306

CWE-287

Related Identifiers

CVE-2025-11661

Affected Products

Projectsandprograms School Management System

References · 13

• 🔥 https://github.com/qqy-123/cve/issues/6 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-11661 · Security Note
• https://osv.dev/vulnerability/CVE-2025-11661 · Vendor Advisory
• https://vuldb.com/?submit.665611 · Note
• https://twitter.com/cracbot/status/1979502776016155083 · Twitter Post
• https://vuldb.com/?id.328078 · Note
• https://t.me/cveNotify/138415 · Telegram Post
• https://vuldb.com/?ctiid.328078 · Note
• https://twitter.com/CveTodo/status/1977607275075322320 · Twitter Post
• https://twitter.com/CVEnew/status/1977596334526882177 · Twitter Post
• https://twitter.com/cracbot/status/1979140392772657172 · Twitter Post
• https://t.me/CVEtracker/34743 · Telegram Post
• https://t.me/cveNotify/139118 · Telegram Post