Approved changes feed: RSS · Atom

cpe:2.3:a:itsourcecode:student_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorItsourcecode (14c06684-839a-5802-ab2e-bd37208c001a)
ProductStudent Management System (1af86bb5-682b-58cf-9f21-89306879579e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-2939 vulnerable 2026-06-08 07:55:17.856445 itsourcecode Student Management System Add Student add_student cross site scripting
LOW (2.4)
A vulnerability was found in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /add_student/ of the component Add Student Module. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Published: 2026-02-22T09:32:09.695Z
Updated: 2026-02-25T18:26:22.340Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2014 vulnerable 2026-06-08 07:55:16.380762 itsourcecode Student Management System index.php sql injection
HIGH (7.3)
A security flaw has been discovered in itsourcecode Student Management System 1.0. This impacts an unknown function of the file /ramonsys/billing/index.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Published: 2026-02-06T10:02:08.204Z
Updated: 2026-02-23T09:23:48.204Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2013 vulnerable 2026-06-08 07:55:16.380374 itsourcecode Student Management System index.php sql injection
HIGH (7.3)
A vulnerability was identified in itsourcecode Student Management System 1.0. This affects an unknown function of the file /ramonsys/soa/index.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.
Published: 2026-02-06T09:32:07.792Z
Updated: 2026-02-23T09:23:33.751Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2012 vulnerable 2026-06-08 07:55:16.379846 itsourcecode Student Management System index.php sql injection
HIGH (7.3)
A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /ramonsys/facultyloading/index.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-02-06T09:02:07.046Z
Updated: 2026-02-23T09:23:21.422Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2011 vulnerable 2026-06-08 07:55:16.375944 itsourcecode Student Management System controller.php sql injection
HIGH (7.3)
A vulnerability was found in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /ramonsys/enrollment/controller.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.
Published: 2026-02-06T08:32:06.745Z
Updated: 2026-02-23T09:23:09.097Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15168 vulnerable 2026-06-08 07:06:35.821899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15078 vulnerable 2026-06-08 07:06:35.647031 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15077 vulnerable 2026-06-08 07:06:35.646703 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15075 vulnerable 2026-06-08 07:06:35.645718 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15034 vulnerable 2026-06-08 07:06:35.587919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14967 vulnerable 2026-06-08 07:06:35.451723 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14653 vulnerable 2026-06-08 07:06:34.906330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14644 vulnerable 2026-06-08 07:06:34.886422 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14639 vulnerable 2026-06-08 07:06:34.877250 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14588 vulnerable 2026-06-08 07:06:34.777827 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14578 vulnerable 2026-06-08 07:06:34.758614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14337 vulnerable 2026-06-08 07:06:34.295968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14336 vulnerable 2026-06-08 07:06:34.295506 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14335 vulnerable 2026-06-08 07:06:34.295069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14334 vulnerable 2026-06-08 07:06:34.294713 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14258 vulnerable 2026-06-08 07:06:34.157379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14257 vulnerable 2026-06-08 07:06:34.156758 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14256 vulnerable 2026-06-08 07:06:34.156408 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14226 vulnerable 2026-06-08 07:06:33.909882 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6191 vulnerable 2026-06-08 06:58:18.121349 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.