Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:student_grades_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductStudent Grades Management System (1756c8bb-b741-5fbb-a21a-c4afb7adda4a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-9486 vulnerable 2026-06-08 08:08:58.990784 SourceCodester Student Grades Management System cross-site request forgery
MEDIUM (4.3)
A security flaw has been discovered in SourceCodester Student Grades Management System 1.0. This affects an unknown part. The manipulation results in cross-site request forgery. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-05-25T19:30:09.710Z
Updated: 2026-05-26T12:50:35.979Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9485 vulnerable 2026-06-08 08:08:58.990525 SourceCodester Student Grades Management System students.php cross site scripting
LOW (3.5)
A vulnerability was identified in SourceCodester Student Grades Management System 1.0. Affected by this issue is some unknown functionality of the file students.php. The manipulation of the argument Remarks leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
Published: 2026-05-25T19:15:09.731Z
Updated: 2026-05-26T12:38:45.429Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9484 vulnerable 2026-06-08 08:08:58.990356 SourceCodester Student Grades Management System classroom.php removeStudentFromClassroom improper authorization
MEDIUM (6.3)
A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected by this vulnerability is the function getClassroomStudents/removeStudentFromClassroom of the file classroom.php. Executing a manipulation of the argument classroom_id can lead to improper authorization. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-05-25T19:00:11.404Z
Updated: 2026-05-27T18:34:21.728Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9483 vulnerable 2026-06-08 08:08:58.990042 SourceCodester Student Grades Management System grades.php improper authorization
MEDIUM (6.3)
A vulnerability was found in SourceCodester Student Grades Management System 1.0. Affected is an unknown function of the file grades.php. Performing a manipulation of the argument student_id results in improper authorization. The attack may be initiated remotely. The exploit has been made public and could be used.
Published: 2026-05-25T18:45:11.976Z
Updated: 2026-05-26T13:02:07.124Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13349 vulnerable 2026-06-08 07:04:32.039598 SourceCodester Student Grades Management System Add New Grade grades.php cross site scripting
LOW (3.5)
A vulnerability has been found in SourceCodester Student Grades Management System 1.0. This issue affects some unknown processing of the file /grades.php of the component Add New Grade Page. The manipulation of the argument Remarks leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Published: 2025-11-18T14:02:06.819Z
Updated: 2025-11-18T14:20:14.687Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12332 vulnerable 2026-06-08 07:04:30.044625 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11485 vulnerable 2026-06-08 07:04:28.227836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.