Oranbyte School Management System 1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:oranbyte:school_management_system:1.0:*:*:*:*:*:*:*part: a version: 1.0 update: *
| Vendor | Oranbyte (7faf76d3-de7f-5192-b5bf-1647bfdc89b2) |
|---|---|
| Product | School Management System (444faaf7-8f61-5336-b3dd-df1a4952843f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-51967 |
vulnerable | 2026-06-08 07:31:11.326652 |
Details available
A Reflected Cross-site Scripting (XSS) vulnerability exists in the themeSet.php file of ProjectsAndPrograms School Management System 1.0. The application fails to sanitize user-supplied input in the theme POST parameter, allowing an attacker to inject and execute arbitrary JavaScript in a victim's browser.
Published: 2025-08-28T00:00:00.000Z
Updated: 2025-08-28T20:11:01.022Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11661 |
vulnerable | 2026-06-08 07:04:28.708641 |
ProjectsAndPrograms School Management System missing authentication
HIGH (7.3)
A vulnerability was found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This affects an unknown part. Performing manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This product adopts a rolling release strategy to maintain continuous delivery
Published: 2025-10-13T04:32:05.413Z
Updated: 2025-10-14T19:37:21.622Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11660 |
vulnerable | 2026-06-08 07:04:28.708160 |
ProjectsAndPrograms School Management System uploadSllyabus.php unrestricted upload
HIGH (7.3)
A vulnerability has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected by this issue is some unknown functionality of the file /assets/uploadSllyabus.php. Such manipulation of the argument File leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable.
Published: 2025-10-13T04:02:05.411Z
Updated: 2025-10-14T19:40:09.882Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11659 |
vulnerable | 2026-06-08 07:04:28.707660 |
ProjectsAndPrograms School Management System uploadNotes.php unrestricted upload
HIGH (7.3)
A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected by this vulnerability is an unknown functionality of the file /assets/uploadNotes.php. This manipulation of the argument File causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been published and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided.
Published: 2025-10-13T03:32:05.355Z
Updated: 2025-10-14T13:38:34.930Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11658 |
vulnerable | 2026-06-08 07:04:28.707049 |
ProjectsAndPrograms School Management System changeSllyabus.php unrestricted upload
HIGH (7.3)
A vulnerability was detected in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected is an unknown function of the file /assets/changeSllyabus.php. The manipulation of the argument File results in unrestricted upload. The attack may be launched remotely. The exploit is now public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases.
Published: 2025-10-13T03:02:05.425Z
Updated: 2025-10-14T13:39:43.412Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11657 |
vulnerable | 2026-06-08 07:04:28.706531 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11656 |
vulnerable | 2026-06-08 07:04:28.705914 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11056 |
vulnerable | 2026-06-08 07:02:27.989196 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.