A vulnerability was found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. It has been rated as critical. The impacted element is an unknown function of the file /Profilers/SProfile/reg.php. Performing manipulation of the argument USN results in sql injection.
This vulnerability is cataloged as CVE-2025-14566. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
