Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:alumni_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductAlumni Management System (61529af5-3d6c-54a9-ac43-5a5d5811871c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-13468 vulnerable 2026-06-08 07:04:32.274651 SourceCodester Alumni Management System Delete admin_class.php delete_event authorization
MEDIUM (5.4)
A weakness has been identified in SourceCodester Alumni Management System 1.0. This issue affects the function delete_forum/delete_career/delete_comment/delete_gallery/delete_event of the file admin/admin_class.php of the component Delete Handler. Executing manipulation of the argument ID can lead to missing authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.
Published: 2025-11-20T13:32:08.236Z
Updated: 2025-11-20T18:33:51.514Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13059 vulnerable 2026-06-08 07:04:31.502675 SourceCodester Alumni Management System manage_career.php sql injection
MEDIUM (6.3)
A weakness has been identified in SourceCodester Alumni Management System 1.0. The impacted element is an unknown function of the file /manage_career.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.
Published: 2025-11-12T20:02:06.864Z
Updated: 2025-11-14T17:33:12.976Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.