Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Online Student Admission System Project Subscribe
Filtered by product Online Student Admission System
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-48149 1 Online Student Admission System Project 1 Online Student Admission System 2023-03-02 N/A 9.8 CRITICAL
Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via the username parameter.
CVE-2022-2681 1 Online Student Admission System Project 1 Online Student Admission System 2022-08-10 N/A 6.1 MEDIUM
A vulnerability classified as problematic was found in SourceCodester Online Student Admission System. Affected by this vulnerability is an unknown functionality of the file edit-profile.php of the component Student User Page. The manipulation with the input <script>alert(/xss/)</script> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205669 was assigned to this vulnerability.
CVE-2021-37371 1 Online Student Admission System Project 1 Online Student Admission System 2021-10-28 7.5 HIGH 9.8 CRITICAL
Online Student Admission System 1.0 is affected by an unauthenticated SQL injection bypass vulnerability in /admin/login.php.
CVE-2021-37372 1 Online Student Admission System Project 1 Online Student Admission System 2021-10-28 6.5 MEDIUM 8.8 HIGH
Online Student Admission System 1.0 is affected by an insecure file upload vulnerability. A low privileged user can upload malicious PHP files by updating their profile image to gain remote code execution.