Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-10597

kidaze CourseSelectionSystem COUNT2.php sql injection

Description

A vulnerability was determined in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This vulnerability affects unknown code of the file /Profilers/PriProfile/COUNT2.php. This manipulation of the argument cname causes sql injection. The attack may be initiated remotely. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

kidaze CourseSelectionSystem

  • 42cd892b40a18d50bd4ed1905fa89f939173a464affected

References