Approved changes feed: RSS · Atom

cpe:2.3:a:donbermoy:advanced_school_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorDonbermoy (7119d731-b45a-52d3-86d0-510723217d29)
ProductAdvanced School Management System (eea067fb-7c68-5ccb-ad0d-8c2f32bf88d7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9690 vulnerable 2026-06-08 07:47:09.544637 SourceCodester Advanced School Management System vendordetails sql injection
MEDIUM (6.3)
A flaw has been found in SourceCodester Advanced School Management System 1.0. This affects an unknown function of the file /index.php/stock/vendordetails. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.
Published: 2025-08-30T13:32:07.015Z
Updated: 2025-09-02T15:17:50.378Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9689 vulnerable 2026-06-08 07:47:09.544160 SourceCodester Advanced School Management System item_select sql injection
MEDIUM (6.3)
A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/stock/item_select. The manipulation of the argument q results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used.
Published: 2025-08-30T13:02:07.064Z
Updated: 2025-09-02T15:17:55.556Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9306 vulnerable 2026-06-08 07:45:22.230694 SourceCodester Advanced School Management System addNotice cross site scripting
LOW (3.5)
A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/notice/addNotice. The manipulation of the argument noticeSubject results in cross site scripting. It is possible to launch the attack remotely. The exploit is now public and may be used.
Published: 2025-08-21T15:32:08.960Z
Updated: 2025-08-22T11:31:39.259Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.