School Management System CVE-2025-11661

MEDIUM

Improper Authentication (CWE-287)

2025-10-13 cna@vuldb.com

Authentication Bypass School Management System

5.5

CVSS 4.0 · NVD

Share

Severity by source

NVD PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

X

DescriptionCVE.org

A vulnerability was found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This affects an unknown part. Performing manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This product adopts a rolling release strategy to maintain continuous delivery

Analysis

A vulnerability was found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This affects an unknown part. Performing manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This product adopts a rolling release strategy to maintain continuous delivery

More in School Management System

View all

CVE-2024-42575 CRITICAL Act Now POC

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

CVE-2024-42574 CRITICAL Act Now POC

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

CVE-2024-42573 CRITICAL Act Now POC

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

CVE-2024-42572 CRITICAL Act Now POC

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

CVE-2024-42571 CRITICAL Act Now POC

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

CVE-2024-42570 CRITICAL Act Now POC

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

CVE-2024-42569 CRITICAL Act Now POC

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

CVE-2024-42568 CRITICAL Act Now POC

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport paramet

CVE-2024-42567 CRITICAL Act Now POC

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at

CVE-2024-42566 CRITICAL Act Now POC

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password paramete

CVE-2022-36193 CRITICAL Act Now POC

SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent chang

CVE-2017-14843 HIGH This Week POC

Mojoomla School Management System for WordPress allows SQL Injection via the id parameter. Rated high severity (CVSS 8.8

Same weakness CWE-287 – Improper Authentication

View all

CVE-2020-0688 HIGH POC

CVE-2023-46805 HIGH POC

CVE-2015-1187 CRITICAL POC

CVE-2024-7593 CRITICAL POC

CVE-2017-7921 CRITICAL POC

CVE-2024-53704 CRITICAL POC

CVE-2015-7755 CRITICAL POC

CVE-2013-0625 CRITICAL POC

Same technique Authentication Bypass

View all

CVE-2023-22515 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2013-2465 CRITICAL POC

CVE-2011-3544 CRITICAL POC

CVE-2012-1723 CRITICAL POC

CVE-2017-10271 HIGH POC

CVE-2015-1427 CRITICAL POC

CVE-2025-3248 CRITICAL POC

Share

CVE-2025-11661 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy