Description
CodeAstro Student Grading System是CodeAstro公司的一个学生评分系统。 CodeAstro Student Grading System 1.0版本存在SQL注入漏洞，该漏洞源于对文件/adminLogin.php中参数staffId的错误操作，可能导致SQL注入攻击。
CodeAstro Student Grading System SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://vuldb.com/?submit.545894
https://nvd.nist.gov/vuln/detail/CVE-2025-11118
https://www.cve.org/CVERecord?id=CVE-2025-11118
https://access.redhat.com/security/cve/cve-2025-3205
https://github.com/advisories/GHSA-hq2j-69vq-qghc
https://www.knowsafe.com/ti/info/0/1000747
https://www.sxxdckj.com/cms/a/Student-Grading-System-SQL-zhu-ru-lou-dong-CNVD-2022-44234.html
https://www.vulmon.com/searchpage?q=Codeastro%20Student%20Grading%20System