CVE-2025-10687

A vulnerability was found in SourceCodester Responsive E-Learning System 1.0. This affects an unknown part of the file /admin/add_teacher.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.3 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
VulDBCNA
7.3 HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 10%
VendorProductVersion
jkevresponsive_e-learning_system
1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/kele28886/cve/issues/1
https://vuldb.com/?ctiid.324811
https://vuldb.com/?id.324811
https://vuldb.com/?submit.653365
https://www.sourcecodester.com/
https://github.com/kele28886/cve/issues/1
https://vuldb.com/?submit.653365