CVE-2025-10665 - CVE House
Back to Database
Status published Medium CVE-2025-10665

kidaze CourseSelectionSystem COUNT3s3.php sql injection

Vulnerability Description

A vulnerability was identified in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. Affected is an unknown function of the file /Profilers/PProfile/COUNT3s3.php. The manipulation of the argument csem leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-10665

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • qihao (VulDB User)

Affected Vendor

Affected Software

CourseSelectionSystem
Vulnerable Versions:
42cd892b40a18d50bd4ed1905fa89f939173a464

Timeline

Official Publish: September 18th, 2025
Last Modified: September 18th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Weaknesses (CWE)