CVE-2025-13325

A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollment_edit1.php. Executing manipulation of the argument en_id can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

Score

CVSS 3.1 8.8 High

Status

Analyzed - cna@vuldb.com

Published

2025-11-18

Last modified

2026-10-18

Weaknesses

CWE-74, CWE-89

Affected products

• Student Information System (Facebook-julykringcadayona)
• Student Information System (Itsourcecode)

References

• https://vuldb.com/?id.332669
• https://vuldb.com/?ctiid.332669
• https://vuldb.com/?submit.691929
• https://github.com/chenxiyue-2006/CVE/issues/1
• https://itsourcecode.com/