PT-2025-44064 · Sourcecodester · Student Grades Management System

Redteam_Bd · Published 2025-10-27 · Updated 2025-10-28 · CVE-2025-12332

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Student Grades Management System version 1.0

Description A flaw exists in the Student Grades Management System that impacts the delete user function within the /admin.php file. Manipulation of this function can lead to cross site scripting, potentially allowing for remote attacks. The exploit for this issue has been published.

Recommendations As a temporary workaround, consider restricting access to the /admin.php file to minimize the risk of exploitation. Disable the delete user function until a fix is available.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-12332

Affected Products

Student Grades Management System

References · 11

• 🔥 https://vuldb.com/?submit.674457 · Exploit
• 🔥 https://vuldb.com/?submit.674456 · Exploit
• 🔥 https://github.com/sanin-s1r3n/CVE-Research/blob/main/CVE-4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-12332 · Security Note
• https://osv.dev/vulnerability/CVE-2025-12332 · Vendor Advisory
• https://twitter.com/CVEnew/status/1982955220448534662 · Twitter Post
• https://vuldb.com/?ctiid.330119 · Note
• https://sourcecodester.com · Note
• https://t.me/CVEtracker/35915 · Telegram Post
• https://t.me/cveNotify/140579 · Telegram Post
• https://vuldb.com/?id.330119 · Note