CVE-2025-13289 | 1000projects Design & Development of Student Database Management System SubjectDetails.php sql injection

A vulnerability, which was classified as critical, was found in 1000projects Design & Development of Student Database Management System 1.0. Affected is an unknown function of the file /TeacherLogin/Academics/SubjectDetails.php. The manipulation of the argument SubCode results in sql injection.

This vulnerability was named CVE-2025-13289. The attack may be performed from remote. In addition, an exploit is available.