A vulnerability classified as critical has been found in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection.

This vulnerability is tracked as CVE-2025-14623. The attack is possible to be carried out remotely. Moreover, an exploit is present.