School Management System CVE-2025-11661

MEDIUM

Improper Authentication (CWE-287)

2025-10-13 cna@vuldb.com

Authentication Bypass School Management System Oranbyte

5.5

CVSS 4.0 · NVD

Share

Severity by source

NVD PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

X

Lifecycle Timeline

2

Analysis Generated

Jul 26, 2026 - 18:49 vuln.today

CVE Published

Oct 13, 2025 - 05:15 cve.org

MEDIUM 5.5

DescriptionCVE.org

A vulnerability was found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This affects an unknown part. Performing manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This product adopts a rolling release strategy to maintain continuous delivery

AnalysisAI

Authentication bypass in ProjectsAndPrograms School Management System allows unauthenticated remote attackers to access protected functions without credentials. A publicly available exploit exists, but no evidence of active exploitation has been confirmed through CISA KEV. The vulnerability has a low EPSS score (0.17%), indicating a low probability of widespread automated exploitation.

More in School Management System

View all

CVE-2024-42575 CRITICAL Act Now POC

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

CVE-2024-42574 CRITICAL Act Now POC

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

CVE-2024-42573 CRITICAL Act Now POC

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

CVE-2024-42572 CRITICAL Act Now POC

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

CVE-2024-42571 CRITICAL Act Now POC

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

CVE-2024-42570 CRITICAL Act Now POC

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

CVE-2024-42569 CRITICAL Act Now POC

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter

CVE-2024-42568 CRITICAL Act Now POC

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport paramet

CVE-2024-42567 CRITICAL Act Now POC

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at

CVE-2024-42566 CRITICAL Act Now POC

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password paramete

CVE-2022-36193 CRITICAL Act Now POC

SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent chang

CVE-2017-14843 HIGH This Week POC

Mojoomla School Management System for WordPress allows SQL Injection via the id parameter. Rated high severity (CVSS 8.8

Same weakness CWE-287 – Improper Authentication

View all

CVE-2022-40684 CRITICAL POC

CVE-2025-61882 CRITICAL POC

CVE-2020-0688 HIGH POC

CVE-2023-46805 HIGH POC

CVE-2023-35078 CRITICAL POC

CVE-2015-1187 CRITICAL POC

CVE-2024-7593 CRITICAL POC

CVE-2017-7921 CRITICAL POC

Same technique Authentication Bypass

View all

CVE-2023-22515 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2013-2465 CRITICAL POC

CVE-2011-3544 CRITICAL POC

CVE-2022-40684 CRITICAL POC

CVE-2025-61882 CRITICAL POC

CVE-2024-0012 CRITICAL POC

CVE-2023-46805 HIGH POC

Share

CVE-2025-11661 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy