github.comexploit
https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README9.md CVE-2025-6477
MEDIUM
SourceCodester Student Result Management System System Settings Page system cross site scripting
Record summary
CVE-2025-6477 has a selected CVSS score of 4.8 (medium).
Description
A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /script/admin/system of the component System Settings Page. The manipulation of the argument School Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 23, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Student Result Management SystemBrowse SourceCodester / Student Result Management System | CVE List | 1.0 | affected |
References
6nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-6477 VDB-313585 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions required
https://vuldb.com/?ctiid.313585 VDB-313585 | SourceCodester Student Result Management System System Settings Page system cross site scriptingvdb entryTechnical description
https://vuldb.com/?id.313585 Submit #600559 | SourceCodester Student Result Management System 1.0 Stored Cross Site ScriptingThird-party advisory
https://vuldb.com/?submit.600559 sourcecodester.comproduct
https://www.sourcecodester.com/