Approved changes feed: RSS · Atom

cpe:2.3:a:oretnom23:student_study_center_desk_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorOretnom23 (bb7583fb-f029-599f-a8a3-33d64769aa1f)
ProductStudent Study Center Desk Management System (f191ac53-0fd8-54d5-8b07-87b84ad42543)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6807 vulnerable 2026-06-08 06:58:20.513614 SourceCodester Student Study Center Desk Management System HTTP POST Request Users.php cross site scripting
LOW (2.4)
A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /sscdms/classes/Users.php?f=save of the component HTTP POST Request Handler. The manipulation of the argument firstname/middlename/lastname/username leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-07-17T03:31:05.059Z
Updated: 2025-06-10T13:25:34.326Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6732 vulnerable 2026-06-08 06:58:20.270819 SourceCodester Student Study Center Desk Management System Users.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. This vulnerability affects unknown code of the file /sscdms/classes/Users.php?f=save. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-07-14T22:31:03.538Z
Updated: 2024-08-26T04:53:06.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6731 vulnerable 2026-06-08 06:58:20.270025 SourceCodester Student Study Center Desk Management System Master.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. This affects an unknown part of the file /Master.php?f=save_student. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-07-14T22:00:05.570Z
Updated: 2024-08-26T04:53:08.746Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44752 vulnerable 2026-06-08 06:12:41.473922 Details available
An issue in Student Study Center Desk Management System v1.0 allows attackers to bypass authentication via a crafted GET request to /php-sscdms/admin/login.php.
Published: 2025-04-22T00:00:00.000Z
Updated: 2025-04-23T13:32:11.499Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-36317 vulnerable 2026-06-08 06:06:28.706927 Details available
Cross Site Scripting (XSS) vulnerability in sourcecodester Student Study Center Desk Management System 1.0 allows attackers to run arbitrary code via crafted GET request to web application URL.
Published: 2023-08-23T00:00:00.000Z
Updated: 2024-10-03T14:03:22.442Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2152 vulnerable 2026-06-08 06:02:41.505415 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2151 vulnerable 2026-06-08 06:02:41.503444 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29985 vulnerable 2026-06-08 06:02:41.153472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1568 vulnerable 2026-06-08 05:52:36.127522 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1567 vulnerable 2026-06-08 05:52:36.126977 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1563 vulnerable 2026-06-08 05:52:36.121371 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1468 vulnerable 2026-06-08 05:52:35.955574 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1467 vulnerable 2026-06-08 05:52:35.954980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1466 vulnerable 2026-06-08 05:52:35.954546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1407 vulnerable 2026-06-08 05:52:35.787573 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.