High severity7.3NVD Advisory· Published Sep 17, 2025· Updated Jun 17, 2026
CVE-2025-10597
CVE-2025-10597
Description
A vulnerability was determined in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This vulnerability affects unknown code of the file /Profilers/PriProfile/COUNT2.php. This manipulation of the argument cname causes sql injection. The attack may be initiated remotely. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:kidaze:courseselectionsystem:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:kidaze:courseselectionsystem:*:*:*:*:*:*:*:*range: <=2017-06-18
- (no CPE)range: up to 42cd892b40a18d50bd4ed1905fa89f939173a464
- (no CPE)range: 42cd892b40a18d50bd4ed1905fa89f939173a464
Patches
Vulnerability mechanics
References
4- github.com/shang-hh/shang/blob/main/sql.txtnvdExploitThird Party Advisory
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.