A vulnerability identified as critical has been detected in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file login_query.php. Performing manipulation of the argument stud_no results in sql injection.

This vulnerability was named CVE-2025-14619. The attack may be initiated remotely. In addition, an exploit is available.