Approved changes feed: RSS · Atom

cpe:2.3:a:alumni_management_system_project:alumni_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorAlumni Management System Project (a01662b1-4d5b-5939-bc47-3c1be152e7ce)
ProductAlumni Management System (a3ae5e62-d32b-5dcb-abe6-2e15a78f2b39)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-25212 vulnerable 2026-06-08 05:30:40.224817 Details available
SQL injection vulnerability in SourceCodester Alumni Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to manage_event.php.
Published: 2021-07-22T18:58:28.000Z
Updated: 2024-08-03T19:56:11.082Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-25210 vulnerable 2026-06-08 05:30:40.222633 Details available
Arbitrary file upload vulnerability in SourceCodester Alumni Management System v 1.0 allows attackers to execute arbitrary code, via the file upload to manage_event.php.
Published: 2021-07-22T18:52:24.000Z
Updated: 2024-08-03T19:56:11.093Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29214 vulnerable 2026-06-08 05:24:58.026558 Details available
SQL injection vulnerability in SourceCodester Alumni Management System 1.0 allows the user to inject SQL payload to bypass the authentication via admin/login.php.
Published: 2021-06-15T19:57:22.000Z
Updated: 2024-08-04T16:48:01.777Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-28072 vulnerable 2026-06-08 05:23:53.758782 Details available
A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0. An authenticated attacker can upload arbitrary file in the gallery.php page and executing it on the server reaching the RCE.
Published: 2020-12-15T20:48:08.000Z
Updated: 2024-08-04T16:33:57.488Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-28071 vulnerable 2026-06-08 05:23:53.758295 Details available
SourceCodester Alumni Management System 1.0 is affected by cross-site Scripting (XSS) in /admin/gallery.php. After the admin authentication an attacker can upload an image in the gallery using a XSS payload in the description textarea called 'about' and reach a stored XSS.
Published: 2020-12-23T17:54:20.000Z
Updated: 2024-08-04T16:33:56.988Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-28070 vulnerable 2026-06-08 05:23:53.757696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.