College Management System Project

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

College Management System Project records in CISA KEV

No College Management System Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

College Management System 9 records HIGH

Records

9 records

TI-2024-07120 CVE-2024-7681 · GHSA-48m4-px35-w8cq

code-projects College Management System Login Page login.php sql injection

HIGH 70

A vulnerability was found in code-projects College Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00734 Published 2024-08-11 No fix listed CWE-89

TI-2022-10899 CVE-2022-28079 · GHSA-8hjf-jrv4-98mp

College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter.

MEDIUM 61

College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.28512 Published 2022-05-05 No fix listed CWE-89

TI-2022-14095 CVE-2022-32420 · GHSA-2hgw-j3xf-7pv3

College Management System v1.0 was discovered to contain a remote code execution (RCE)…

MEDIUM 57

College Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /College/admin/teacher.php.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.20139 Published 2022-07-01 No fix listed

TI-2022-18562 CVE-2022-39180 · GHSA-7pqv-7v63-hvp9

SQL injection in College Management System v1.0

MEDIUM 50

College Management System v1.0 - SQL Injection (SQLi).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00655 Published 2022-11-17 Fixed CWE-89

TI-2020-15912 CVE-2020-26051 · GHSA-c5v8-j47m-hqhf

College Management System Php 1.0 suffers from SQL injection vulnerabilities in the…

MEDIUM 47

College Management System Php 1.0 suffers from SQL injection vulnerabilities in the index.php page from POST parameters 'unametxt' and 'pwdtxt', which are not filtered before passing a SQL query.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02433 Published 2021-02-08 No fix listed CWE-89

TI-2020-15547 CVE-2020-25409 · GHSA-2whj-gvjj-j382

Projectsworlds College Management System Php 1.0 is vulnerable to SQL injection issues over multiple parameters.

MEDIUM 45

Projectsworlds College Management System Php 1.0 is vulnerable to SQL injection issues over multiple parameters.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01605 Published 2021-05-24 No fix listed CWE-89

TI-2022-18561 CVE-2022-39179 · GHSA-g5fq-p794-xxc8

SQL injection in College Management System v1.0

LOW 36

College Management System v1.0 - Authenticated remote code execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01151 Published 2022-11-17 Fixed CWE-89

TI-2022-12612 CVE-2022-30404 · GHSA-9wfw-2v53-7984

College Management System v1.0 is vulnerable to SQL Injection via…

LOW 33

College Management System v1.0 is vulnerable to SQL Injection via /College_Management_System/admin/display-teacher.php?teacher_id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00811 Published 2022-05-13 No fix listed CWE-89

TI-2020-15546 CVE-2020-25408 · GHSA-qx62-c3rx-4fhq

A Cross-Site Request Forgery (CSRF) vulnerability exists in ProjectWorlds College…

LOW 30

A Cross-Site Request Forgery (CSRF) vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, faculty, teacher, subject,…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00781 Published 2021-05-24 No fix listed CWE-352

Open these records in search →

Critical	3
High	4
Medium	2
Low	0
No CVSS	0