CVE-2025-10597High· 7.3▾ TwilightA vulnerability was determined in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This vulnerability affects unknown code of the file /Profilers/PriProfile/COUNT2.php. This manipulation of the argument cname …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 40.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.5%
A vulnerability was determined in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This vulnerability affects unknown code of the file /Profilers/PriProfile/COUNT2.php. This manipulation of the argument cname causes sql injection. The attack may be initiated remotely. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available.
courseselectionsystem <= 2017-06-18Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-10601High· 7.3A vulnerability has been found in SourceCodester Online Exam Form Submission 1.0
CVE-2025-10602Medium· 6.3A vulnerability was found in SourceCodester Online Exam Form Submission 1.0
CVE-2025-10598High· 7.3A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0
CVE-2025-10599High· 7.3A security flaw has been discovered in itsourcecode Web-Based Internet Laboratory Management System 1.0
CVE-2025-10595Medium· 6.3A vulnerability has been found in SourceCodester Online Student File Management System 1.0
CVE-2025-10596High· 7.3A vulnerability was found in SourceCodester Online Exam Form Submission 1.0