CVE-2025-14537

A weakness has been identified in code-projects Class and Exam Timetable Management 1.0. Affected by this issue is some unknown functionality of the file /preview7.php. This manipulation of the argument course_year_section/semester causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cna@vuldb.com

Published

2025-12-11

Last modified

2026-10-07

Weaknesses

CWE-74, CWE-89

Affected products

• Class And Exam Timetable Management (Code-projects)
• Class And Exam Timetable Management System (Fabian)

References

• https://vuldb.com/?id.335876
• https://vuldb.com/?ctiid.335876
• https://vuldb.com/?submit.703712
• https://vuldb.com/?submit.703717
• https://github.com/woshilaiyi/cve/issues/13
• https://github.com/woshilaiyi/cve/issues/14
• https://code-projects.org/