Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:online_student_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductOnline Student Management System (c33a762d-1651-5062-874b-06db1cca887f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-2171 vulnerable 2026-06-08 07:55:16.661197 code-projects Online Student Management System Login accounts.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects Online Student Management System 1.0. Affected is an unknown function of the file accounts.php of the component Login. Performing a manipulation of the argument username/password results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.
Published: 2026-02-08T18:02:07.481Z
Updated: 2026-02-23T09:46:10.817Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2156 vulnerable 2026-06-08 07:55:16.632833 code-projects Online Student Management System Announcement Management index.php cross site scripting
LOW (2.4)
A weakness has been identified in code-projects Online Student Management System 1.0. The impacted element is an unknown function of the file /admin/announcement/index.php?view=add of the component Announcement Management Module. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-02-08T14:32:06.953Z
Updated: 2026-02-23T09:42:51.098Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.