Vulnerability record · CVE-2025-4467 · published 9 May 2025
CVE-2025-4467: Senior-walter online student clearance system injection vulnerability
SSenior Walter · Online Student Clearance System
A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-admin.php. The manipulation of the argument id/txtfullname/txtemail/cmddesignation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Description
A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-admin.php. The manipulation of the argument id/txtfullname/txtemail/cmddesignation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| https://github.com/Colorado-all/cve/blob/main/Online%20Student%20Clearance%20System/SQL-2.md | ExploitThird Party Advisory |
| https://vuldb.com/?ctiid.308086 | Permissions RequiredVDB Entry |
| https://vuldb.com/?id.308086 | Third Party AdvisoryVDB Entry |
| https://vuldb.com/?submit.566245 | Third Party AdvisoryVDB Entry |
| https://www.sourcecodester.com/ | Product |
Track CVE-2025-4467 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2025-4467), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.