Approved changes feed: RSS · Atom

cpe:2.3:a:college_management_system_project:college_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorCollege Management System Project (408c110d-5ab3-5cc7-939d-60fc54d2eed8)
ProductCollege Management System (ef9e461e-427c-5a38-ae76-ae272f8ee652)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/olotieno/college-management-system-php purl2cpe 2026-06-01 10:15:55.836179

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7681 vulnerable 2026-06-08 06:58:23.000298 code-projects College Management System Login Page login.php sql injection
HIGH (7.3)
A vulnerability was found in code-projects College Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component Login Page. The manipulation of the argument email/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-11T23:31:03.861Z
Updated: 2024-08-12T14:01:52.011Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5370 vulnerable 2026-06-08 06:56:15.741081 Kashipara College Management System submit_enroll_staff.php cross site scripting
LOW (3.5)
A vulnerability was found in Kashipara College Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file submit_enroll_staff.php. The manipulation of the argument class_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-266282 is the identifier assigned to this vulnerability.
Published: 2024-05-26T17:31:04.308Z
Updated: 2024-08-01T21:11:12.718Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39180 vulnerable 2026-06-08 05:47:18.292503 College Management System v1.0 - SQL Injection (SQLi)
CRITICAL (9.8)
College Management System v1.0 - SQL Injection (SQLi). By inserting SQL commands to the username and password fields in the login.php page
Published: 2022-11-17T22:27:54.746Z
Updated: 2025-04-29T19:47:56.238Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39179 vulnerable 2026-06-08 05:47:18.292016 College Management System v1.0 - Authenticated remote code execution
HIGH (7.2)
College Management System v1.0 - Authenticated remote code execution. An admin user (the authentication can be bypassed using SQL Injection that mentioned in my other report) can upload .php file that contains malicious code via student.php file.
Published: 2022-11-17T22:27:55.603Z
Updated: 2025-04-28T18:14:25.817Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32420 vulnerable 2026-06-08 05:44:43.321937 Details available
College Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /College/admin/teacher.php. This vulnerability is exploited via a crafted PHP file.
Published: 2022-07-01T20:45:15.000Z
Updated: 2024-08-03T07:39:51.153Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30404 vulnerable 2026-06-08 05:43:38.007603 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28079 vulnerable 2026-06-08 05:42:44.036711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-26051 vulnerable 2026-06-08 05:23:49.732396 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25409 vulnerable 2026-06-08 05:22:36.725418 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25408 vulnerable 2026-06-08 05:22:36.724844 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.