Approved changes feed: RSS · Atom

cpe:2.3:a:qdocs:smart_school_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQdocs (2d0c3e86-c78f-5604-b2c6-842ca5b3cdcb)
ProductSmart School Management System (3a9f4061-f95d-51a9-b07b-5d164951889c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4991 vulnerable 2026-06-08 08:07:02.764231 QDOCS Smart School Management System Admission Enquiry enquiry cross site scripting
LOW (3.5)
A vulnerability was detected in QDOCS Smart School Management System up to 7.2. The impacted element is an unknown function of the file /admin/enquiry of the component Admission Enquiry Module. Performing a manipulation of the argument Note results in cross site scripting. The attack is possible to be carried out remotely.
Published: 2026-03-27T22:03:43.432Z
Updated: 2026-03-30T18:32:32.719Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8784 vulnerable 2026-06-08 07:00:25.709434 QDocs Smart School Management System Chat mynewuser sql injection
MEDIUM (6.3)
A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnerability is an unknown functionality of the file /user/chat/mynewuser of the component Chat. The manipulation of the argument users[] with the input 1'+AND+(SELECT+3220+FROM+(SELECT(SLEEP(5)))ZNun)+AND+'WwBM'%3d'WwBM as part of POST Request Parameter leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.0.1 is able to address this issue. It is recommended to upgrade the affected component.
Published: 2024-09-13T18:31:09.898Z
Updated: 2024-09-16T17:46:18.889Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.