CVE-2025-9238

CVE-2025-9238 describes a SQL injection vulnerability in the Swatadru Exam-Seating-Arrangement application, specifically within the student login component's /student.php file when processing the 'email' argument. This flaw allows for remote exploitation, potentially leading to unauthorized access, data manipulation, or denial of service. With a CVSS score of 7.3 (HIGH), it is easily exploitable over the network with low attack complexity and no user interaction required. While the exploit has been publicly disclosed, there is no evidence of active exploitation, no known exploit frameworks like Metasploit or Nuclei, and minimal community discussion or media coverage.