College Management System
Approved changes feed: RSS · Atom
cpe:2.3:a:mstfakts:college-management-system:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Mstfakts (f37191c4-3d91-5f48-8277-709cb047a2ed) |
|---|---|
| Product | College Management System (45bbea7a-0408-5993-81a4-9bad506320f2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-95828 |
vulnerable | 2026-10-13 12:28:40.536730 |
Mstfakts College-Management-System Authentication server.php session_start session fixiation
MEDIUM (4.3)
A vulnerability was determined in Mstfakts College-Management-System. This affects the function session_start of the file Front-end/server.php of the component Authentication. Executing a manipulation can lead to session fixiation. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-09-22T22:45:16.325Z
Updated: 2026-09-23T13:36:32.529Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86213 |
vulnerable | 2026-09-16 04:32:58.801195 |
Mstfakts College-Management-System Search university.php mysqli_query sql injection
HIGH (7.3)
A vulnerability was found in Mstfakts College-Management-System. This issue affects the function mysqli_query of the file Front-end/university.php of the component Search Handler. The manipulation of the argument book_name/book_author results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-09-06T12:45:09.402Z
Updated: 2026-09-10T17:42:21.888Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86215 |
vulnerable | 2026-09-16 04:32:58.709036 |
Mstfakts College-Management-System Logout server.php session expiration
MEDIUM (4.3)
A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/server.php of the component Logout Handler. Such manipulation of the argument log_out leads to session expiration. It is possible to launch the attack remotely. The exploit is publicly available and might be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-09-06T13:15:07.840Z
Updated: 2026-09-09T14:00:43.771Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.