College Management System
by College Management System Project
CVEs (6)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-25409 | Cri | 0.64 | 9.8 | 0.02 | May 24, 2021 | Projectsworlds College Management System Php 1.0 is vulnerable to SQL injection issues over multiple parameters. | ||
| CVE-2020-26051 | Cri | 0.64 | 9.8 | 0.02 | Feb 8, 2021 | College Management System Php 1.0 suffers from SQL injection vulnerabilities in the index.php page from POST parameters 'unametxt' and 'pwdtxt', which are not filtered before passing a SQL query. | ||
| CVE-2022-32420 | Hig | 0.59 | 8.8 | 0.19 | Jul 1, 2022 | College Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /College/admin/teacher.php. This vulnerability is exploited via a crafted PHP file. | ||
| CVE-2024-7681 | Hig | 0.48 | 7.3 | 0.01 | Aug 12, 2024 | A vulnerability was found in code-projects College Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component Login Page. The manipulation of the argument email/password leads to sql injection. The… | ||
| CVE-2022-30404 | Hig | 0.47 | 7.2 | 0.01 | May 13, 2022 | College Management System v1.0 is vulnerable to SQL Injection via /College_Management_System/admin/display-teacher.php?teacher_id=. | ||
| CVE-2020-25408 | Med | 0.42 | 6.5 | 0.01 | May 24, 2021 | A Cross-Site Request Forgery (CSRF) vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, faculty, teacher, subject, scores, location, and article data. |
- risk 0.64cvss 9.8epss 0.02
Projectsworlds College Management System Php 1.0 is vulnerable to SQL injection issues over multiple parameters.
- risk 0.64cvss 9.8epss 0.02
College Management System Php 1.0 suffers from SQL injection vulnerabilities in the index.php page from POST parameters 'unametxt' and 'pwdtxt', which are not filtered before passing a SQL query.
- risk 0.59cvss 8.8epss 0.19
College Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /College/admin/teacher.php. This vulnerability is exploited via a crafted PHP file.
- risk 0.48cvss 7.3epss 0.01
A vulnerability was found in code-projects College Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component Login Page. The manipulation of the argument email/password leads to sql injection. The…
- risk 0.47cvss 7.2epss 0.01
College Management System v1.0 is vulnerable to SQL Injection via /College_Management_System/admin/display-teacher.php?teacher_id=.
- risk 0.42cvss 6.5epss 0.01
A Cross-Site Request Forgery (CSRF) vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, faculty, teacher, subject, scores, location, and article data.