CVE-2025-10687

A vulnerability was found in SourceCodester Responsive E-Learning System 1.0. This affects an unknown part of the file /admin/add_teacher.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
References
Link Resource
https://github.com/kele28886/cve/issues/1 Exploit Third Party Advisory
https://vuldb.com/?ctiid.324811 Permissions Required VDB Entry
https://vuldb.com/?id.324811 Third Party Advisory VDB Entry
https://vuldb.com/?submit.653365 Third Party Advisory VDB Entry
https://www.sourcecodester.com/ Product
https://github.com/kele28886/cve/issues/1 Exploit Third Party Advisory
https://vuldb.com/?submit.653365 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:jkev:responsive_e-learning_system:1.0:*:*:*:*:*:*:*

History

19 Sep 2025, 20:42

Type Values Removed Values Added
References () https://github.com/kele28886/cve/issues/1 - () https://github.com/kele28886/cve/issues/1 - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.324811 - () https://vuldb.com/?ctiid.324811 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.324811 - () https://vuldb.com/?id.324811 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.653365 - () https://vuldb.com/?submit.653365 - Third Party Advisory, VDB Entry
References () https://www.sourcecodester.com/ - () https://www.sourcecodester.com/ - Product
First Time Jkev responsive E-learning System
Jkev
CPE cpe:2.3:a:jkev:responsive_e-learning_system:1.0:*:*:*:*:*:*:*

18 Sep 2025, 21:15

Type Values Removed Values Added
References () https://github.com/kele28886/cve/issues/1 - () https://github.com/kele28886/cve/issues/1 -
References () https://vuldb.com/?submit.653365 - () https://vuldb.com/?submit.653365 -

18 Sep 2025, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-09-18 18:15

Updated : 2025-09-19 20:42


NVD link : CVE-2025-10687

Mitre link : CVE-2025-10687

CVE.ORG link : CVE-2025-10687


JSON object : View

Products Affected

jkev

  • responsive_e-learning_system
CWE
CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')