CVE-2025-11661

ProjectsAndPrograms School Management System missing authentication

State: Published
Severity: 6.9 Medium
Published: Oct 13, 2025
Updated: Oct 14, 2025
Reserved: Oct 12, 2025

Description

A vulnerability was found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This affects an unknown part. Performing manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This product adopts a rolling release strategy to maintain continuous delivery

Scores

CVSS	Score	Vector	Source
4.0	6.9 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P	VulDB
3.1	7.3 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R	VulDB
3.0	7.3 High	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R	VulDB
2.0	7.5 High	AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR	VulDB

Weaknesses

CWE-306 Missing Authentication
CWE-287 Improper Authentication

Affected Products

Product	Versions
School Management SystemProjectsAndPrograms	6b6fae5426044f89c08d0dd101c7fa71f9042a59Affected

References

VDB-328078 | ProjectsAndPrograms School Management System missing authenticationvdb-entry
VDB-328078 | CTI Indicators (IOB, IOC)signaturepermissions-required
Submit #665611 | https://oranbyte.com/ ProjectsAndPrograms/school-management-system 1.0 Widespread Missing Authenticationthird-party-advisory
https://github.com/qqy-123/cve/issues/6exploitissue-tracking

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.