CVE-2025-14566: HIGH Severity SQL Injection Vulnerability in kidaze CourseSelectionSystem | Secably CVE Database

Summary

CVE-2025-14566 describes a critical SQL injection vulnerability found in kidaze CourseSelectionSystem. This vulnerability allows a remote attacker to execute arbitrary SQL commands by manipulating the USN parameter in the /Profilers/SProfile/reg.php file, potentially leading to unauthorized data access, modification, or deletion.

Technical Details

CVE-2025-14566 is a SQL injection vulnerability present in kidaze CourseSelectionSystem up to commit 42cd892b40a18d50bd4ed1905fa89f939173a464. The vulnerability exists within the /Profilers/SProfile/reg.php file, specifically in an unspecified function handling the USN (University Student Number) parameter. Due to insufficient input sanitization, an attacker can inject malicious SQL code into the USN parameter. This injected code is then executed by the application's database server, allowing the attacker to bypass security measures and interact directly with the database. The vulnerability is remotely exploitable, meaning an attacker does not need local access to the server to initiate the attack. Publicly available exploits exist, increasing the risk of exploitation.

The root cause of the vulnerability is the failure to properly sanitize and validate user-supplied input before using it in a database query. Specifically, the USN parameter is directly incorporated into an SQL query without escaping or parameterization. This allows an attacker to inject arbitrary SQL code, such as ' OR '1'='1, which can bypass authentication or retrieve sensitive data.

Affected Products and Versions

The following product is affected by this vulnerability:

kidaze CourseSelectionSystem up to commit 42cd892b40a18d50bd4ed1905fa89f939173a464

Impact Assessment

Successful exploitation of this vulnerability can have severe consequences:

Data Breach: An attacker can gain unauthorized access to sensitive student data, including personal information, grades, and course enrollment details.
Account Takeover: An attacker can modify or reset user credentials, potentially gaining control of administrator accounts and compromising the entire system.
System Compromise: In some cases, an attacker might be able to execute arbitrary commands on the server, leading to complete system compromise.
Data Manipulation: An attacker can modify or delete data within the database, potentially disrupting the course selection process and causing significant operational issues.

Remediation

Due to the severity of this vulnerability, immediate action is required to mitigate the risk.

Immediate Actions

Isolate Affected Systems: If possible, isolate the affected CourseSelectionSystem from the network to prevent further exploitation.
Monitor for Suspicious Activity: Closely monitor system logs and database activity for any signs of exploitation.
Review and Sanitize Input: Immediately review the /Profilers/SProfile/reg.php file and implement proper input sanitization and validation for the USN parameter.

Long-term Solutions

Parameterized Queries: Use parameterized queries or prepared statements to prevent SQL injection. This ensures that user-supplied input is treated as data, not as executable code.
Input Validation: Implement strict input validation to ensure that the USN parameter conforms to expected formats and does not contain any malicious characters.
Web Application Firewall (WAF): Deploy a Web Application Firewall (WAF) to detect and block SQL injection attempts.
Regular Security Audits: Conduct regular security audits and penetration testing to identify and address vulnerabilities in the CourseSelectionSystem.
Update to a Secure Version: If a patched version of kidaze CourseSelectionSystem becomes available, immediately update to the latest version.

References

Detection & Scanning

This SQL injection vulnerability can be detected using various security tools and techniques:

Web Application Scanners: Use web application scanners such as OWASP ZAP, Burp Suite, or Nikto to automatically detect SQL injection vulnerabilities.
Manual Testing: Manually test the /Profilers/SProfile/reg.php file by injecting SQL code into the USN parameter and observing the application's response.
Database Monitoring: Monitor database logs for suspicious activity, such as unusual queries or error messages.

Scan Your Website

Secably AI Scanner can detect this and 50+ other vulnerabilities automatically.

Start Free Scan