CVE-2025-6475

A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/admin/manage_students of the component Manage Students Module. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
References
Link Resource
https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README8.md Broken Link
https://vuldb.com/?ctiid.313583 Permissions Required VDB Entry
https://vuldb.com/?id.313583 Third Party Advisory VDB Entry
https://vuldb.com/?submit.600550 Third Party Advisory VDB Entry
https://www.sourcecodester.com/ Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:razormist:student_result_management_system:1.0:*:*:*:*:*:*:*

History

27 Jun 2025, 17:20

Type Values Removed Values Added
First Time Razormist student Result Management System
Razormist
CPE cpe:2.3:a:razormist:student_result_management_system:1.0:*:*:*:*:*:*:*
References () https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README8.md - () https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README8.md - Broken Link
References () https://vuldb.com/?ctiid.313583 - () https://vuldb.com/?ctiid.313583 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.313583 - () https://vuldb.com/?id.313583 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.600550 - () https://vuldb.com/?submit.600550 - Third Party Advisory, VDB Entry
References () https://www.sourcecodester.com/ - () https://www.sourcecodester.com/ - Product

23 Jun 2025, 20:16

Type Values Removed Values Added
Summary
  • (es) Se encontró una vulnerabilidad en SourceCodester Student Result Management System 1.0, clasificada como problemática. Este problema afecta a un procesamiento desconocido del archivo /script/admin/manage_students del componente Manage Students Module. La manipulación provoca Cross-Site Scripting. El ataque puede ejecutarse en remoto. Se ha hecho público el exploit y puede que sea utilizado.

22 Jun 2025, 12:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-06-22 12:15

Updated : 2025-06-27 17:20


NVD link : CVE-2025-6475

Mitre link : CVE-2025-6475

CVE.ORG link : CVE-2025-6475


JSON object : View

Products Affected

razormist

  • student_result_management_system
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-94

Improper Control of Generation of Code ('Code Injection')