Approved changes feed: RSS · Atom

cpe:2.3:a:itsourcecode:university_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorItsourcecode (14c06684-839a-5802-ab2e-bd37208c001a)
ProductUniversity Management System (e2dd5bf4-df39-5943-9667-649c56a9df4d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4474 vulnerable 2026-06-08 08:05:13.416853 itsourcecode University Management System admin_single_student_update.php cross site scripting
LOW (2.4)
A flaw has been found in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /admin_single_student_update.php. This manipulation of the argument st_name causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be used.
Published: 2026-03-20T06:02:12.554Z
Updated: 2026-03-24T01:55:35.435Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4356 vulnerable 2026-06-08 08:05:13.275067 itsourcecode University Management System add_result.php cross site scripting
LOW (2.4)
A flaw has been found in itsourcecode University Management System 1.0. Affected is an unknown function of the file /add_result.php. Executing a manipulation of the argument vr can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used.
Published: 2026-03-18T01:02:10.804Z
Updated: 2026-03-18T14:11:41.455Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3982 vulnerable 2026-06-08 08:01:19.744547 itsourcecode University Management System view_result.php cross site scripting
MEDIUM (4.3)
A vulnerability was determined in itsourcecode University Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_result.php. Executing a manipulation of the argument vr can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-03-12T04:32:10.884Z
Updated: 2026-03-12T15:03:19.519Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3944 vulnerable 2026-06-08 08:01:19.693793 itsourcecode University Management System att_add.php sql injection
HIGH (7.3)
A vulnerability was determined in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /att_add.php. This manipulation of the argument Name causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-03-11T12:32:10.799Z
Updated: 2026-03-11T13:11:04.978Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3765 vulnerable 2026-06-08 08:01:19.342926 itsourcecode University Management System att_single_view.php sql injection
HIGH (7.3)
A vulnerability was identified in itsourcecode University Management System 1.0. This affects an unknown function of the file /att_single_view.php. Such manipulation of the argument dt leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.
Published: 2026-03-08T20:02:08.390Z
Updated: 2026-03-10T20:41:13.560Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3760 vulnerable 2026-06-08 08:01:19.335846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3747 vulnerable 2026-06-08 08:01:19.310186 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3740 vulnerable 2026-06-08 08:01:19.299841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3413 vulnerable 2026-06-08 08:01:18.590446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3412 vulnerable 2026-06-08 08:01:18.589775 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3411 vulnerable 2026-06-08 08:01:18.588292 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6958 vulnerable 2026-06-08 06:58:20.836321 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6957 vulnerable 2026-06-08 06:58:20.835626 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6956 vulnerable 2026-06-08 06:58:20.834939 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6952 vulnerable 2026-06-08 06:58:20.831206 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.