College Management System Project

College Management System

9 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2024-7681

Exploit
  • EPSS 0.71%
  • Veröffentlicht 12.08.2024 13:38:55
  • Zuletzt bearbeitet 15.08.2024 18:09:55

A vulnerability was found in code-projects College Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component Login Page. The manipulation of the argument email/password lea...

7.2

CVE-2022-39179

  • EPSS 1.38%
  • Veröffentlicht 17.11.2022 23:15:18
  • Zuletzt bearbeitet 28.04.2025 19:15:45

College Management System v1.0 - Authenticated remote code execution. An admin user (the authentication can be bypassed using SQL Injection that mentioned in my other report) can upload .php file that contains malicious code via student.php file.

9.8

CVE-2022-39180

  • EPSS 0.25%
  • Veröffentlicht 17.11.2022 23:15:18
  • Zuletzt bearbeitet 21.11.2024 07:17:43

College Management System v1.0 - SQL Injection (SQLi). By inserting SQL commands to the username and password fields in the login.php page

8.8

CVE-2022-32420

Exploit
  • EPSS 2.8%
  • Veröffentlicht 01.07.2022 21:15:08
  • Zuletzt bearbeitet 21.11.2024 07:06:21

College Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /College/admin/teacher.php. This vulnerability is exploited via a crafted PHP file.

7.2

CVE-2022-30404

  • EPSS 0.27%
  • Veröffentlicht 13.05.2022 15:15:10
  • Zuletzt bearbeitet 21.11.2024 07:02:43

College Management System v1.0 is vulnerable to SQL Injection via /College_Management_System/admin/display-teacher.php?teacher_id=.

8.8

CVE-2022-28079

Exploit
  • EPSS 83.55%
  • Veröffentlicht 05.05.2022 17:15:13
  • Zuletzt bearbeitet 21.11.2024 06:56:44

College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter.

6.5

CVE-2020-25408

  • EPSS 0.24%
  • Veröffentlicht 24.05.2021 13:15:07
  • Zuletzt bearbeitet 21.11.2024 05:17:57

A Cross-Site Request Forgery (CSRF) vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, faculty, teacher, subject, scores, location, and article ...

9.8

CVE-2020-25409

  • EPSS 0.68%
  • Veröffentlicht 24.05.2021 13:15:07
  • Zuletzt bearbeitet 21.11.2024 05:17:57

Projectsworlds College Management System Php 1.0 is vulnerable to SQL injection issues over multiple parameters.

9.8

CVE-2020-26051

Exploit
  • EPSS 0.49%
  • Veröffentlicht 08.02.2021 14:15:12
  • Zuletzt bearbeitet 21.11.2024 05:19:06

College Management System Php 1.0 suffers from SQL injection vulnerabilities in the index.php page from POST parameters 'unametxt' and 'pwdtxt', which are not filtered before passing a SQL query.