GCVE - cpe:2.3:a:itsourcecode:student_information_management

Approved changes feed: RSS · Atom

cpe:2.3:a:itsourcecode:student_information_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Itsourcecode (`14c06684-839a-5802-ab2e-bd37208c001a`)
Product	Student Information Management System (`fee1b6fc-c643-5559-8478-fb94eea3d0cb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-9839`	vulnerable	2026-06-08 07:47:10.030430	itsourcecode Student Information Management System index.php sql injection HIGH (7.3) A security flaw has been discovered in itsourcecode Student Information Management System 1.0. The affected element is an unknown function of the file /admin/modules/course/index.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited. Published: 2025-09-02T22:32:09.884Z Updated: 2025-09-03T19:05:06.881Z Open on db.gcve.eu Reference links https://vuldb.com/?id.322186 https://vuldb.com/?ctiid.322186 https://vuldb.com/?submit.645384 https://github.com/mybonn/CVE/issues/3 https://itsourcecode.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-9838`	vulnerable	2026-06-08 07:47:10.030025	itsourcecode Student Information Management System index.php sql injection HIGH (7.3) A vulnerability was identified in itsourcecode Student Information Management System 1.0. Impacted is an unknown function of the file /admin/modules/subject/index.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used. Published: 2025-09-02T22:32:07.018Z Updated: 2025-09-03T19:10:34.504Z Open on db.gcve.eu Reference links https://vuldb.com/?id.322185 https://vuldb.com/?ctiid.322185 https://vuldb.com/?submit.645382 https://github.com/mybonn/CVE/issues/2 https://itsourcecode.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-9837`	vulnerable	2026-06-08 07:47:10.029453	itsourcecode Student Information Management System index.php sql injection HIGH (7.3) A vulnerability was determined in itsourcecode Student Information Management System 1.0. This issue affects some unknown processing of the file /admin/modules/student/index.php. This manipulation of the argument studentId causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Published: 2025-09-02T22:02:09.792Z Updated: 2025-09-03T20:05:52.027Z Open on db.gcve.eu Reference links https://vuldb.com/?id.322184 https://vuldb.com/?ctiid.322184 https://vuldb.com/?submit.641750 https://github.com/hjsjbsg/record-for-own/issues/4 https://itsourcecode.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-9595`	vulnerable	2026-06-08 07:47:09.307684	code-projects Student Information Management System login.php cross site scripting MEDIUM (4.3) A vulnerability was found in code-projects Student Information Management System 1.0. The impacted element is an unknown function of the file /login.php. The manipulation of the argument uname results in cross site scripting. The attack may be performed from a remote location. The exploit has been made public and could be used. Published: 2025-08-28T23:32:07.226Z Updated: 2025-08-29T13:35:07.338Z Open on db.gcve.eu Reference links https://vuldb.com/?id.321769 https://vuldb.com/?ctiid.321769 https://vuldb.com/?submit.636359 https://github.com/zzb1388/cve/issues/57 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10673`	vulnerable	2026-06-08 07:02:27.301639	itsourcecode Student Information Management System index.php sql injection HIGH (7.3) A vulnerability was determined in itsourcecode Student Information Management System 1.0. The impacted element is an unknown function of the file /admin/modules/class/index.php. This manipulation of the argument classId causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Published: 2025-09-18T15:02:06.584Z Updated: 2025-09-19T17:09:38.103Z Open on db.gcve.eu Reference links https://vuldb.com/?id.324794 https://vuldb.com/?ctiid.324794 https://vuldb.com/?submit.653191 https://github.com/windhxy/CVE-my/issues/1 https://itsourcecode.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10113`	vulnerable	2026-06-08 07:02:26.321304	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10112`	vulnerable	2026-06-08 07:02:26.320935	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10111`	vulnerable	2026-06-08 07:02:26.320404	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10062`	vulnerable	2026-06-08 07:02:26.237912	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-5381`	vulnerable	2026-06-08 06:56:15.763746	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

itsourcecode Student Information Management System 1.0

PURL mappings

Vulnerability references

Contribute