Approved changes feed: RSS · Atom

cpe:2.3:a:hemant6488:codeigniter-studentmanagementsystem:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHemant6488 (a7969fba-1bab-5dc6-ad60-75b4cbc75731)
ProductCodeigniter Studentmanagementsystem (d30305ed-14f6-56d5-a38b-984029156ba9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-9518 vulnerable 2026-06-08 08:08:59.011406 hemant6488 CodeIgniter-StudentManagementSystem Students Controller view_students.php addStudent cross site scripting
MEDIUM (4.3)
A vulnerability was identified in hemant6488 CodeIgniter-StudentManagementSystem. The impacted element is the function addStudent of the file view_students.php of the component Students Controller. The manipulation of the argument Name leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-05-26T00:30:10.258Z
Updated: 2026-05-29T14:55:18.562Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9517 vulnerable 2026-06-08 08:08:59.011188 hemant6488 CodeIgniter-StudentManagementSystem Student Management addStudentView access control
HIGH (7.3)
A vulnerability was determined in hemant6488 CodeIgniter-StudentManagementSystem. The affected element is an unknown function of the file /index.php/students/addStudentView of the component Student Management Handler. Executing a manipulation can lead to improper access controls. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-05-26T00:00:14.761Z
Updated: 2026-05-26T15:13:11.629Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.