Skip to main content

Student Result Management System CVE-2025-5649

| EUVDEUVD-2025-16976 MEDIUM
Incorrect Privilege Assignment (CWE-266)
2025-06-05 cna@vuldb.com
Information Disclosure Student Result Management System
5.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None

Lifecycle Timeline

4
EUVD ID Assigned
Mar 14, 2026 - 17:53 euvd
EUVD-2025-16976
Analysis Generated
Mar 14, 2026 - 17:53 vuln.today
PoC Detected
Jun 10, 2025 - 15:05 vuln.today
Public exploit code
CVE Published
Jun 05, 2025 - 09:15 nvd
MEDIUM 5.3

DescriptionCVE.org

A vulnerability classified as critical has been found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file /admin/core/new_user of the component Register Interface. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

A remote code execution vulnerability in A vulnerability classified as critical (CVSS 5.3). Risk factors: public PoC available.

Technical ContextAI

Vulnerability type: remote code execution. Affects A vulnerability classified as critical.

RemediationAI

Monitor vendor channels for patch availability.

More in Student Result Management System

View all
CVE-2023-48722 CRITICAL POC
9.8 Dec 21

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. Rated cri
CVE-2023-48720 CRITICAL POC
9.8 Dec 21

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. Rated cri
CVE-2023-48718 CRITICAL POC
9.8 Dec 21

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. Rated cri
CVE-2023-48716 CRITICAL POC
9.8 Dec 21

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. Rated cri
CVE-2025-50489 HIGH POC
7.5 Jul 28

Session hijacking in PHPGurukul Student Result Management System v2.0 stems from the /srms/change-password.php component
CVE-2025-50490 HIGH POC
7.5 Jul 28

Session hijacking in PHPGurukul Student Result Management System v2.0 stems from improper session invalidation in the em
CVE-2025-5599 HIGH POC
7.3 Jun 04

Critical SQL injection vulnerability in PHPGurukul Student Result Management System version 1.3, exploitable through the
CVE-2026-5531 MEDIUM POC
5.5 Apr 05

SourceCodester Student Result Management System 1.0 stores authentication credentials in cleartext within an HTTP-access
CVE-2025-5724 LOW POC
1.9 Jun 06

Stored cross-site scripting in SourceCodester Student Result Management System 1.0 allows an authenticated attacker with
CVE-2025-5723 LOW POC
1.9 Jun 06

Stored cross-site scripting in SourceCodester Student Result Management System 1.0 allows an authenticated attacker with
CVE-2025-5722 LOW POC
1.9 Jun 06

Stored cross-site scripting (XSS) in SourceCodester Student Result Management System 1.0 allows an authenticated attacke
CVE-2025-5727 LOW POC
1.9 Jun 06

Stored cross-site scripting in SourceCodester Student Result Management System 1.0 allows an authenticated attacker with

Same weakness CWE-266 – Incorrect Privilege Assignment

View all
CVE-2025-27007 CRITICAL POC
9.8
CVE-2024-28000 CRITICAL POC
9.8
CVE-2026-48172 CRITICAL POC
10.0
CVE-2024-24882 CRITICAL POC
9.8
CVE-2025-47539 CRITICAL POC
9.8
CVE-2022-20759 HIGH POC
8.8
CVE-2024-54363 CRITICAL
9.8
CVE-2026-23550 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2025-5649 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy