CVE-2025-12277

A flaw has been found in Abdullah-Hasan-Sajjad Online-School up to f09dda77b4c29aa083ff57f4b1eb991b98b68883. This affects an unknown part of the file /studentLogin.php. This manipulation of the argument Email causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. This product adopts a rolling release strategy to maintain continuous delivery The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-74
• CWE-89

• https://github.com/DaoYunXinShang/Reports/blob/main/sql%20injection.doc
• https://vuldb.com/?ctiid.329948
• https://vuldb.com/?id.329948
• https://vuldb.com/?submit.674173

Published

Oct 27, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-12271A vulnerability was identified in Tenda CH22 1.0.0.1. This a…9.8
• CVE-2025-12272A security flaw has been discovered in Tenda CH22 1.0.0.1. T…9.8
• CVE-2025-12273A weakness has been identified in Tenda CH22 1.0.0.1. Affect…9.8
• CVE-2025-12274A security vulnerability has been detected in Tenda CH22 1.0…8.8
• CVE-2025-12275Mail Configuration File Manipulation + Command Execution.Thi…9.8
• CVE-2025-12276A vulnerability was detected in LearnHouse up to 98dfad76aad…7.5
• CVE-2025-12278Logout Functionality not Working.This issue affects BLU-IC2:…6.5
• CVE-2025-12279A vulnerability has been found in code-projects Client Detai…4.8
• CVE-2025-1228A vulnerability classified as problematic has been found in …5.3
• CVE-2025-12280A vulnerability was found in code-projects Client Details Sy…5.4
• CVE-2025-12281A vulnerability was determined in code-projects Client Detai…5.4
• CVE-2025-12282A vulnerability was identified in code-projects Client Detai…4.8