Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:student_membership_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductStudent Membership System (da086db8-03f9-5866-a447-c65e53ac6827)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5198 vulnerable 2026-06-08 08:07:03.241168 code-projects Student Membership System Admin Login index.php sql injection
HIGH (7.3)
A vulnerability was determined in code-projects Student Membership System 1.0. The impacted element is an unknown function of the file /admin/index.php of the component Admin Login. This manipulation of the argument username/password causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Published: 2026-03-31T11:00:13.682Z
Updated: 2026-03-31T18:03:55.741Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5197 vulnerable 2026-06-08 08:07:03.240849 code-projects Student Membership System delete_user.php sql injection
MEDIUM (6.3)
A vulnerability was found in code-projects Student Membership System 1.0. The affected element is an unknown function of the file /delete_user.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.
Published: 2026-03-31T10:00:15.769Z
Updated: 2026-03-31T13:32:09.879Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5196 vulnerable 2026-06-08 08:07:03.240501 code-projects Student Membership System delete_member.php sql injection
MEDIUM (6.3)
A vulnerability has been found in code-projects Student Membership System 1.0. Impacted is an unknown function of the file /delete_member.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-03-31T09:00:14.994Z
Updated: 2026-04-02T15:00:30.860Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5195 vulnerable 2026-06-08 08:07:03.239945 code-projects Student Membership System User Registration sql injection
HIGH (7.3)
A flaw has been found in code-projects Student Membership System 1.0. This issue affects some unknown processing of the component User Registration Handler. Executing a manipulation can lead to sql injection. The attack can be launched remotely.
Published: 2026-03-31T08:15:13.647Z
Updated: 2026-03-31T12:45:21.409Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.