ORETNOM23 Student Grading System vulnerabilities

11 CVEs affecting ORETNOM23 Student Grading System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-10421, published 2025-09-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-27304, published 2022-04-05. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter.
CVE-2022-28026, published 2022-04-21. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=student_p&id=.
CVE-2022-28025, published 2022-04-21. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=school_year.
CVE-2022-28024, published 2022-04-21. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=grade.
CVE-2025-10421, published 2025-09-15. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw has been found in SourceCodester Student Grading System 1.0. This vulnerability affects unknown code of the file /update_account.php. Executing manipulation of the argument ID can lead to sql…
CVE-2025-10420, published 2025-09-15. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was detected in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /form137.php. Performing manipulation of the argument ID results in sql injection.…
CVE-2025-10419, published 2025-09-15. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A security vulnerability has been detected in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionality of the file /del_promote.php. Such manipulation of the…
CVE-2025-10418, published 2025-09-15. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A weakness has been identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_students.php. This manipulation of the…
CVE-2025-10409, published 2025-09-14. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. A weakness has been identified in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /rms.php?page=users. Executing manipulation of the argument fname can lead to sql…
CVE-2025-10408, published 2025-09-14. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. A security flaw has been discovered in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionality of the file /edit_user.php. Performing manipulation of the…

Latest

CVE-2025-10407, published 2025-09-14. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_user.php. Such manipulation of the argument…