HIGHCVSS 7.3Vulnerability
CVE-2025-12277
A flaw has been found in Abdullah-Hasan-Sajjad Online-School up to f09dda77b4c29aa083ff57f4b1eb991b98b68883. This affects an unknown part of the file /studentLogin.php. This manipulation of the argument Email causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. This product adopts a rolling release strategy to maintain continuous delivery The vendor was contacted early about this disclosure but did not respond in any way.
Properties
- Severity
- HIGH
- Epss score
- 0.00328
- Cvss severity
- HIGH
- Cvss score
- 7.3
- Retrieved at
- 2026-10-24T22:41:43+00:00
- Last source
- FIRST EPSS
- Score
- 7.3
- Cve id
- CVE-2025-12277
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- First seen by Signal
- 2026-10-08T13:00:48+00:00
- Name
- CVE-2025-12277
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- Published at
- 2025-10-27T13:15:43.960
- Last modified
- 2026-10-08T11:10:00.250
- Epss percentile
- 0.24658
Related Entities (2)
Explore deeper with Ninja Signal's threat intelligence graph