Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:faculty_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductFaculty Management System (2f36d610-59fa-5f49-982f-03fea8db358d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-6167 vulnerable 2026-06-08 08:07:04.517977 code-projects Faculty Management System subject-print.php sql injection
HIGH (7.3)
A vulnerability was detected in code-projects Faculty Management System 1.0. Impacted is an unknown function of the file /subject-print.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.
Published: 2026-04-13T06:15:10.133Z
Updated: 2026-04-13T11:16:22.719Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0460 vulnerable 2026-06-08 06:22:01.165206 code-projects Faculty Management System student-print.php sql injection
MEDIUM (6.3)
A vulnerability was found in code-projects Faculty Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/pages/student-print.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250565 was assigned to this vulnerability.
Published: 2024-01-12T15:31:04.964Z
Updated: 2025-06-03T14:04:48.239Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7096 vulnerable 2026-06-08 06:21:57.019350 code-projects Faculty Management System crud.php sql injection
MEDIUM (4.7)
A flaw has been found in code-projects Faculty Management System 1.0. The affected element is an unknown function of the file /admin/php/crud.php. This manipulation of the argument fieldname/tablename causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Published: 2023-12-25T01:00:06.137Z
Updated: 2025-12-11T08:35:37.713Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7057 vulnerable 2026-06-08 06:21:56.877409 code-projects Faculty Management System yearlevel.php cross site scripting
LOW (3.5)
A vulnerability, which was classified as problematic, has been found in code-projects Faculty Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/pages/yearlevel.php. The manipulation of the argument Year Level/Section leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-248744.
Published: 2023-12-22T03:31:04.595Z
Updated: 2024-09-12T18:45:20.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7056 vulnerable 2026-06-08 06:21:56.875831 code-projects Faculty Management System subjects.php cross site scripting
LOW (2.4)
A vulnerability classified as problematic was found in code-projects Faculty Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/pages/subjects.php. The manipulation of the argument Description/Units leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-248743.
Published: 2023-12-22T03:00:05.677Z
Updated: 2024-09-09T20:48:12.994Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.