Approved changes feed: RSS · Atom

cpe:2.3:a:online_student_enrollment_system_project:online_student_enrollment_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorOnline Student Enrollment System Project (113b18d7-e7f9-5100-b6e1-34e7bc2bef1d)
ProductOnline Student Enrollment System (90064ea2-ab86-5ac6-82d6-c90ddd80a867)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/osmannmalik/online-student-enrollment-system purl2cpe 2026-06-01 10:13:18.080164

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-5395 vulnerable 2026-06-08 06:56:15.791632 itsourcecode Online Student Enrollment System listofinstructor.php sql injection
MEDIUM (6.3)
A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file listofinstructor.php. The manipulation of the argument FullName leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-266309 was assigned to this vulnerability.
Published: 2024-05-27T02:31:03.686Z
Updated: 2024-08-01T21:11:12.574Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5393 vulnerable 2026-06-08 06:56:15.790005 itsourcecode Online Student Enrollment System listofcourse.php sql injection
MEDIUM (6.3)
A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been classified as critical. This affects an unknown part of the file listofcourse.php. The manipulation of the argument idno leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-266307.
Published: 2024-05-27T01:31:03.527Z
Updated: 2024-08-01T21:11:12.673Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46503 vulnerable 2026-06-08 05:50:38.980101 Details available
A cross-site scripting (XSS) vulnerability in the component /admin/register.php of Online Student Enrollment System v1.0 allows attackers to execute arbitrary web scripts via a crafted payload injected into the name parameter.
Published: 2023-01-12T00:00:00.000Z
Updated: 2025-04-08T14:30:39.234Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46502 vulnerable 2026-06-08 05:50:38.979657 Details available
Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /student_enrollment/admin/login.php.
Published: 2023-01-13T00:00:00.000Z
Updated: 2025-04-07T19:02:51.520Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.