What is CVE-2025-51567?

CVE-2025-51567 is a critical-severity vulnerability in Jayesh Online Exam System, classified under SQL Injection. CVSS score: 9.1/10. Published 2026-01-12.

How severe is CVE-2025-51567?

Critical severity. CVSS v3 base score is 9.1 out of 10.

SQL Injection in Jayesh Online Exam System

CVE-2025-51567

A SQL Injection was found in the /exam/user/profile.php page of kashipara Online Exam System V1.0, which allows remote attackers to execute arbitrary SQL command to get unauthorized database access via the rname, rcollage, rnumber, rgender and rpassword parameters in a POST HTTP request.

Vulnerability class: SQL Injection

EPSS: 0.004 (28.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.

Affected products

Jayesh Online_exam_system — versions 1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2025-51567?: CVE-2025-51567 is a critical-severity vulnerability in Jayesh Online Exam System, classified under SQL Injection. CVSS score: 9.1/10. Published 2026-01-12.
How severe is CVE-2025-51567?: Critical severity. CVSS v3 base score is 9.1 out of 10.