# CVE-2025-50585: DayCloud StudentManage SQL injection in adminStudentUrl

Source: https://junglewise.ai/threats/cve-2025-50585-daycloud-studentmanage-sql-injection-in-adminstudenturl  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-07-18. Updated: 2026-07-05  
License: CC BY 4.0 with a link back

CVE-2025-50585 · Severity: high · CVSS 8.8 · Published 2025-07-18

StudentManage, a web-based student information management system, contains a security flaw that allows authenticated users to interfere with its database. By exploiting this vulnerability, an attacker could gain unauthorized access to sensitive student records, modify academic data, or potentially delete information. This could lead to significant data breaches and loss of integrity for educational records.

Technologies: [Daycloud Studentmanage](https://junglewise.ai/threats/technologies/studentmanage). Vendors: [Daycloud](https://junglewise.ai/threats/vendors/daycloud).

## Quick answers

**Is CVE-2025-50585 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-50585 being exploited in the wild.

**How severe is CVE-2025-50585?** High severity, with a CVSS score of 8.8, published 18 July 2025.

**Which products and versions are affected?** Daycloud Studentmanage 1.0.

**Is there a fix for CVE-2025-50585?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2025-50585 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2025-50585?** Check whether you run Daycloud Studentmanage at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A SQL injection vulnerability exists in DayCloud StudentManage v1.0 within the 'query' parameter of the /admin/adminStudentUrl endpoint. The flaw is located in the com.dayrain.controller.admin.AdminStudentController class, where user-supplied input for the student search function is not properly sanitized or parameterized before being used in a database query. An attacker with low-level administrative privileges can exploit this via the network to extract sensitive data, modify database contents, or bypass authentication mechanisms. The vulnerability has been verified using manual injection payloads and automated tools like SQLMap.

## Affected products

- DayCloud StudentManage 1.0

## Timeline

- 2025-07-18: disclosed: Vulnerability reported on GitHub issues and published to NVD
- 2025-07-21: advisory: CISA-ADP enrichment added CVSS and CWE data

## References

- [https://gitee.com/DayCloud/student-manage](https://gitee.com/DayCloud/student-manage)
- [https://github.com/SimonKang949/Vulnerabilities/issues/2](https://github.com/SimonKang949/Vulnerabilities/issues/2)

## Related threats

- [DayCloud StudentManage stored XSS in Add A New Student module](https://junglewise.ai/threats/cve-2025-50583-daycloud-studentmanage-stored-xss-in-add-a-new-student-module)
- [DayCloud StudentManage XSS in Add A New Course module](https://junglewise.ai/threats/cve-2025-50582-daycloud-studentmanage-xss-in-add-a-new-course-module)
- [DayCloud StudentManage XSS in Add A New Teacher module](https://junglewise.ai/threats/cve-2025-50584-daycloud-studentmanage-xss-in-add-a-new-teacher-module)
- [DayCloud StudentManage CSRF in addStudent interface](https://junglewise.ai/threats/cve-2025-50586-daycloud-studentmanage-csrf-in-addstudent-interface)