Medium severity6.3NVD Advisory· Published Sep 27, 2025· Updated Apr 29, 2026
CVE-2025-11056
CVE-2025-11056
Description
A flaw has been found in ProjectsAndPrograms School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file owner_panel/fetch-data/select-students.php. This manipulation of the argument select causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Affected products
2- cpe:2.3:a:oranbyte:school_management_system:1.0:*:*:*:*:*:*:*
- Range: <=1.0
Patches
Vulnerability mechanics
References
4- gold-textbook-8ff.notion.site/school-management-system-student_panel-Owner-end-select-students-php-delay-SQL-injection-27485e97f35380a1b482c8e079cd6503nvdExploitThird Party Advisory
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.