Approved changes feed: RSS · Atom

cpe:2.3:a:online_enrollment_management_system_project:online_enrollment_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorOnline Enrollment Management System Project (7455dc5a-c104-510a-a3d6-b902ee5f602f)
ProductOnline Enrollment Management System (0de89d37-4f18-5741-815b-93e5801fed27)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-44599 vulnerable 2026-06-08 05:36:46.372989 Details available
The id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to SQL injection attacks. A crafted payload injects a SQL sub-query that calls MySQL's load_file function with a UNC file path that references a URL on an external domain. The application interacted with that domain, indicating that the injected SQL query was executed. The attacker can retrieve sensitive information for all users of this system.
Published: 2021-12-23T12:31:27.000Z
Updated: 2024-08-04T04:25:16.823Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40579 vulnerable 2026-06-08 05:35:18.821165 Details available
https://www.sourcecodester.com/ Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 is affected by: Incorrect Access Control. The impact is: gain privileges (remote).
Published: 2021-12-28T11:59:58.000Z
Updated: 2024-08-04T02:44:10.805Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40578 vulnerable 2026-06-08 05:35:18.820682 Details available
Authenticated Blind & Error-based SQL injection vulnerability was discovered in Online Enrollment Management System in PHP and PayPal Free Source Code 1.0, that allows attackers to obtain sensitive information and execute arbitrary SQL commands via IDNO parameter.
Published: 2021-12-07T21:13:44.000Z
Updated: 2024-08-04T02:44:10.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40577 vulnerable 2026-06-08 05:35:18.820251 Details available
A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 in the Add-Users page via the Name parameter.
Published: 2021-11-08T17:45:05.000Z
Updated: 2024-08-04T02:44:10.855Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.