Alumni Management System Project

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Alumni Management System Project records in CISA KEV

No Alumni Management System Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Alumni Management System 6 records MEDIUM

Records

6 records

TI-2020-17082 CVE-2020-28070 · GHSA-r4r6-76p6-65m4

SourceCodester Alumni Management System 1.0 is affected by SQL injection causing…

MEDIUM 62

SourceCodester Alumni Management System 1.0 is affected by SQL injection causing arbitrary remote code execution from GET input in view_event.php via the 'id' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.22898 Published 2020-12-23 No fix listed CWE-89

TI-2020-17601 CVE-2020-29214 · GHSA-22j2-mp37-f8p9

SQL injection vulnerability in SourceCodester Alumni Management System 1.0 allows the…

MEDIUM 49

SQL injection vulnerability in SourceCodester Alumni Management System 1.0 allows the user to inject SQL payload to bypass the authentication via admin/login.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04499 Published 2021-06-15 No fix listed CWE-89

TI-2021-07472 CVE-2021-25212 · GHSA-v6c2-47h6-2hfg

SQL injection vulnerability in SourceCodester Alumni Management System v 1.0 allows…

MEDIUM 45

SQL injection vulnerability in SourceCodester Alumni Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to manage_event.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01476 Published 2021-07-22 No fix listed CWE-89

TI-2021-07470 CVE-2021-25210 · GHSA-fw5x-x7h2-3j3x

Arbitrary file upload vulnerability in SourceCodester Alumni Management System v 1.0…

MEDIUM 45

Arbitrary file upload vulnerability in SourceCodester Alumni Management System v 1.0 allows attackers to execute arbitrary code, via the file upload to manage_event.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01479 Published 2021-07-22 No fix listed CWE-434

TI-2020-17084 CVE-2020-28072 · GHSA-wjp8-43wv-mq9c

A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System…

LOW 37

A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02682 Published 2020-12-15 No fix listed CWE-434

TI-2020-17083 CVE-2020-28071 · GHSA-qgxh-9fmh-3q95

SourceCodester Alumni Management System 1.0 is affected by cross-site Scripting (XSS) in…

LOW 23

SourceCodester Alumni Management System 1.0 is affected by cross-site Scripting (XSS) in /admin/gallery.php.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00779 Published 2020-12-23 No fix listed CWE-79

Open these records in search →

Critical	4
High	1
Medium	1
Low	0
No CVSS	0