Approved changes feed: RSS · Atom

cpe:2.3:a:arslansoft_education_portal_project:arslansoft_education_portal:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorArslansoft Education Portal Project (22d86eaa-a304-5997-85c2-5bd2dbe7d71d)
ProductArslansoft Education Portal (a7d8e97a-21f4-5829-addb-e7b15ad8499b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5637 vulnerable 2026-06-08 06:19:44.330260 Plaintext Storage of a Password in ArslanSoft's Education Portal
HIGH (7.5)
Unrestricted Upload of File with Dangerous Type vulnerability in ArslanSoft Education Portal allows Read Sensitive Strings Within an Executable. This issue affects Education Portal: before v1.1.
Published: 2023-12-01T13:33:41.505Z
Updated: 2026-05-20T14:10:40.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5636 vulnerable 2026-06-08 06:19:44.329958 Malicious File Upload in ArslanSoft's Education Portal
CRITICAL (9.8)
Unrestricted Upload of File with Dangerous Type vulnerability in ArslanSoft Education Portal allows Command Injection. This issue affects Education Portal: before v1.1.
Published: 2023-12-01T13:37:57.783Z
Updated: 2026-05-20T14:17:35.432Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5635 vulnerable 2026-06-08 06:19:44.329450 User Enumeration in ArslanSoft's Education Portal
HIGH (7.5)
Improper Protection for Outbound Error Messages and Alert Signals vulnerability in ArslanSoft Education Portal allows Account Footprinting. This issue affects Education Portal: before v1.1.
Published: 2023-12-01T13:29:44.356Z
Updated: 2026-05-21T07:32:37.372Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5634 vulnerable 2026-06-08 06:19:44.328786 SQLi in ArslanSoft's Education Portal
CRITICAL (9.8)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ArslanSoft Education Portal allows SQL Injection. This issue affects Education Portal: before v1.1.
Published: 2023-12-01T13:19:13.935Z
Updated: 2026-05-21T07:33:49.082Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.