Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:student_result_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductStudent Result Management System (14efb9a2-b440-5b7a-8751-642ab9d3e423)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5531 vulnerable 2026-06-08 08:07:03.800137 SourceCodester Student Result Management System HTTP GET Request login_credentials.txt cleartext storage in file
MEDIUM (5.3)
A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /login_credentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-04-05T01:00:17.893Z
Updated: 2026-04-06T14:51:24.567Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2984 vulnerable 2026-06-08 07:55:17.923256 SourceCodester Student Result Management System drop_user.php denial of service
MEDIUM (6.5)
A vulnerability was identified in SourceCodester Student Result Management System 1.0. This affects an unknown function of the file /admin/core/drop_user.php. Such manipulation of the argument ID leads to denial of service. The attack can be executed remotely. The exploit is publicly available and might be used.
Published: 2026-02-23T10:02:10.131Z
Updated: 2026-02-23T12:44:35.884Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2983 vulnerable 2026-06-08 07:55:17.922889 SourceCodester Student Result Management System Bulk Import import_users.php access control
HIGH (7.3)
A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted element is an unknown function of the file /admin/core/import_users.php of the component Bulk Import. This manipulation of the argument File causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Published: 2026-02-23T09:32:07.933Z
Updated: 2026-02-23T12:45:23.221Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2938 vulnerable 2026-06-08 07:55:17.855104 SourceCodester Student Result Management System update_smtp.php access control
HIGH (7.3)
A vulnerability has been found in SourceCodester Student Result Management System 1.0. The affected element is an unknown function of the file /srms/script/admin/core/update_smtp.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-02-22T08:32:09.102Z
Updated: 2026-02-25T18:29:24.137Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6477 vulnerable 2026-06-08 07:43:15.132103 SourceCodester Student Result Management System System Settings Page system cross site scripting
LOW (2.4)
A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /script/admin/system of the component System Settings Page. The manipulation of the argument School Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-22T13:00:08.845Z
Updated: 2025-06-23T13:59:49.414Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6475 vulnerable 2026-06-08 07:43:15.128480 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5727 vulnerable 2026-06-08 07:37:25.604132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5726 vulnerable 2026-06-08 07:37:25.603766 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5725 vulnerable 2026-06-08 07:37:25.603221 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5724 vulnerable 2026-06-08 07:37:25.602721 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5723 vulnerable 2026-06-08 07:37:25.602139 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5722 vulnerable 2026-06-08 07:37:25.599862 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5721 vulnerable 2026-06-08 07:37:25.599467 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5649 vulnerable 2026-06-08 07:37:25.389558 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4912 vulnerable 2026-06-08 07:29:17.501529 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4898 vulnerable 2026-06-08 07:29:17.479391 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4720 vulnerable 2026-06-08 07:29:17.145738 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.