{"id":"CVE-2025-10597","summary":"kidaze CourseSelectionSystem COUNT2.php sql injection","details":"A vulnerability was determined in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This vulnerability affects unknown code of the file /Profilers/PriProfile/COUNT2.php. This manipulation of the argument cname causes sql injection. The attack may be initiated remotely. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available.","modified":"2026-10-20T10:30:30.327527286Z","published":"2025-09-17T15:32:05.161Z","database_specific":{"cna_assigner":"VulDB","cwe_ids":["CWE-74","CWE-89"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/10xxx/CVE-2025-10597.json"},"references":[{"type":"WEB","url":"https://github.com/shang-hh/shang/blob/main/sql.txt"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/10xxx/CVE-2025-10597.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10597"},{"type":"ADVISORY","url":"https://vuldb.com/?id.324614"},{"type":"ADVISORY","url":"https://vuldb.com/?submit.649316"},{"type":"REPORT","url":"https://vuldb.com/?ctiid.324614"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/shang-hh/shang","events":[{"introduced":"42cd892b40a18d50bd4ed1905fa89f939173a464"},{"last_affected":"42cd892b40a18d50bd4ed1905fa89f939173a464"}]}],"versions":["42cd892b40a18d50bd4ed1905fa89f939173a464"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-10597.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X"}]}