Description
A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| code-projects | School Fees Payment System | 1.0 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Code-Projects School Fees Payment System 1.0 - SQL Injection http/cves/2025/CVE-2025-6403.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
References
- VDB-313397 | code-projects School Fees Payment System student.php sql injection vdb-entry technical-description
- VDB-313397 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #597758 | code-projects School Fees Payment System 1.0 SQL Injection third-party-advisory
- https://github.com/tuooo/CVE/issues/16 exploit issue-tracking
- https://code-projects.org/ product