CVE-2025-13289 is a SQL injection vulnerability in 1000projects Design & Development of Student Database Management System 1.0. It affects an unspecified function in the file /TeacherLogin/Academics/SubjectDetails.php. The vulnerability allows remote attackers with low privileges to manipulate the SubCode argument to perform SQL injection. Public exploit code is available. The vulnerability has a medium severity rating with a CVSS score of 6.3.