Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:scholars_tracking_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductScholars Tracking System (34662dab-6fad-546a-8f54-de31fdc2b07d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-14951 vulnerable 2026-06-08 07:06:35.412569 code-projects Scholars Tracking System home.php sql injection
HIGH (7.3)
A security vulnerability has been detected in code-projects Scholars Tracking System 1.0. The impacted element is an unknown function of the file /home.php. Such manipulation of the argument post_content leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-12-19T14:32:06.003Z
Updated: 2026-02-24T05:56:19.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14950 vulnerable 2026-06-08 07:06:35.411889 code-projects Scholars Tracking System delete_post.php sql injection
HIGH (7.3)
A weakness has been identified in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /delete_post.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
Published: 2025-12-19T13:32:06.549Z
Updated: 2026-02-24T05:56:08.240Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14940 vulnerable 2026-06-08 07:06:35.399031 code-projects Scholars Tracking System delete_user.php sql injection
HIGH (7.3)
A vulnerability was determined in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /admin/delete_user.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2025-12-19T04:02:08.625Z
Updated: 2026-02-24T05:55:55.720Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.