Approved changes feed: RSS · Atom

cpe:2.3:a:yzk2356911358:studentservlet-jsp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorYzk2356911358 (1e422ef6-7673-5335-91b4-ae34690b0c05)
ProductStudentservlet Jsp (92c6ce2f-3e29-5037-b72e-6ab185194a86)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/yzk2356911358/studentservlet-jsp purl2cpe 2026-06-01 10:11:08.940701

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3037 vulnerable 2026-06-08 07:23:07.867523 yzk2356911358 StudentServlet-JSP cross-site request forgery
MEDIUM (4.3)
A vulnerability has been found in yzk2356911358 StudentServlet-JSP cc0cdce25fbe43b6c58b60a77a2c85f52d2102f5/d4d7a0643f1dae908a4831206f2714b21820f991 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.
Published: 2025-03-31T22:31:04.940Z
Updated: 2025-04-01T03:57:31.845Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3036 vulnerable 2026-06-08 07:23:07.864889 yzk2356911358 StudentServlet-JSP Student Management cross site scripting
LOW (2.4)
A vulnerability, which was classified as problematic, was found in yzk2356911358 StudentServlet-JSP cc0cdce25fbe43b6c58b60a77a2c85f52d2102f5/d4d7a0643f1dae908a4831206f2714b21820f991. This affects an unknown part of the component Student Management Handler. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.
Published: 2025-03-31T22:00:10.200Z
Updated: 2025-04-01T13:32:51.605Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.