Abdullah-Hasan-Sajjad Online-School studentLogin.php sql injection
Vulnerability Description
A flaw has been found in Abdullah-Hasan-Sajjad Online-School up to f09dda77b4c29aa083ff57f4b1eb991b98b68883. This affects an unknown part of the file /studentLogin.php. This manipulation of the argument Email causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. This product adopts a rolling release strategy to maintain continuous delivery The vendor was contacted early about this disclosure but did not respond in any way.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-12277
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- daoyunxinshang (VulDB User)
Affected Vendor
Abdullah-Hasan-Sajjad
View all reports →