Approved changes feed: RSS · Atom

cpe:2.3:a:itsourcecode:student_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorItsourcecode (14c06684-839a-5802-ab2e-bd37208c001a)
ProductStudent Management System (1af86bb5-682b-58cf-9f21-89306879579e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-2939 vulnerable 2026-06-08 07:55:17.858246 itsourcecode Student Management System Add Student add_student cross site scripting
LOW (2.4)
A vulnerability was found in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /add_student/ of the component Add Student Module. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Published: 2026-02-22T09:32:09.695Z
Updated: 2026-02-25T18:26:22.340Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6191 vulnerable 2026-06-08 06:58:18.120640 itsourcecode Student Management System Login Page login.php sql injection
HIGH (7.3)
A vulnerability classified as critical has been found in itsourcecode Student Management System 1.0. This affects an unknown part of the file login.php of the component Login Page. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-269163.
Published: 2024-06-20T14:31:05.824Z
Updated: 2024-08-01T21:33:04.955Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48656 vulnerable 2026-06-08 06:50:09.770832 Details available
Cross Site Scripting vulnerability in student management system in php with source code v.1.0.0 allows a remote attacker to execute arbitrary code.
Published: 2024-10-22T00:00:00.000Z
Updated: 2024-10-23T16:08:59.942Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.