PT-2025-47077 · Code Projects · Student Information System

Yunlin · Published 2025-11-16 · Updated 2025-11-21 · CVE-2025-13242

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions code-projects Student Information System version 2.0

Description A flaw exists in code-projects Student Information System version 2.0 related to the processing of the /register.php file. This can be exploited remotely to perform SQL injection. The exploit for this issue has been publicly disclosed. The vulnerable parameter is not specified.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-13242

Affected Products

Student Information System

References · 12

• 🔥 https://github.com/asd1238525/cve/blob/main/SQL14.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-13242 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-13242 · Security Note
• https://t.me/cveNotify/142941 · Telegram Post
• https://twitter.com/cracbot/status/1991823954206761081 · Twitter Post
• https://vuldb.com/?id.332568 · Note
• https://t.me/CVEtracker/37444 · Telegram Post
• https://vuldb.com/?submit.687527 · Note
• https://vuldb.com/?ctiid.332568 · Note
• https://twitter.com/CVEnew/status/1989961605241823358 · Twitter Post
• https://code-projects.org · Note
• https://twitter.com/RedPacketSec/status/1990009738986233878 · Twitter Post