CveMateVulnerability intelligence

College Management System Project vulnerabilities

9 vulnerabilities

Known vulnerabilities in College Management System Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1

College Management System9 vulnerabilities

CVE-2020-26051college_management_system_projectcollege_management_system5y ago08-02-2021 13:31

College Management System Php 1.0 suffers from SQL injection vulnerabilities in the index.php page from POST parameters 'unametxt' and 'pwdtxt', which are not filtered before passing a SQL query.CVE-2020-25409college_management_system_projectcollege_management_system5y ago24-05-2021 12:39

Projectsworlds College Management System Php 1.0 is vulnerable to SQL injection issues over multiple parameters.CVE-2020-25408college_management_system_projectcollege_management_system5y ago24-05-2021 12:45

A Cross-Site Request Forgery (CSRF) vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, faculty, teacher, subject, scores, location, and article data.CVE-2022-39180college_management_system_projectcollege_management_system+13y ago17-11-2022 22:27

College Management System v1.0 - SQL Injection (SQLi). By inserting SQL commands to the username and password fields in the login.php page CVE-2022-39179college_management_system_projectcollege_management_system+13y ago17-11-2022 22:27

College Management System v1.0 - Authenticated remote code execution. An admin user (the authentication can be bypassed using SQL Injection that mentioned in my other report) can upload .php file that contains malicious code via student.php file.CVE-2022-28079college_management_system_projectcollege_management_system4y ago05-05-2022 15:31

College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter.CVE-2022-32420college_management_system_projectcollege_management_system4y ago01-07-2022 20:45

College Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /College/admin/teacher.php. This vulnerability is exploited via a crafted PHP file.CVE-2022-30404college_management_system_projectcollege_management_system4y ago13-05-2022 14:49

College Management System v1.0 is vulnerable to SQL Injection via /College_Management_System/admin/display-teacher.php?teacher_id=.CVE-2024-7681code-projectscollege_management_system+12y ago11-08-2024 23:31

A vulnerability was found in code-projects College Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component Login Page. The manipulation of the argument email/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.