Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Online Student Admission System Project Subscribe
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-48149 1 Online Student Admission System Project 1 Online Student Admission System 2023-03-02 N/A 9.8 CRITICAL
Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via the username parameter.
CVE-2022-2681 1 Online Student Admission System Project 1 Online Student Admission System 2022-08-10 N/A 6.1 MEDIUM
A vulnerability classified as problematic was found in SourceCodester Online Student Admission System. Affected by this vulnerability is an unknown functionality of the file edit-profile.php of the component Student User Page. The manipulation with the input <script>alert(/xss/)</script> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205669 was assigned to this vulnerability.
CVE-2021-37371 1 Online Student Admission System Project 1 Online Student Admission System 2021-10-28 7.5 HIGH 9.8 CRITICAL
Online Student Admission System 1.0 is affected by an unauthenticated SQL injection bypass vulnerability in /admin/login.php.
CVE-2021-37372 1 Online Student Admission System Project 1 Online Student Admission System 2021-10-28 6.5 MEDIUM 8.8 HIGH
Online Student Admission System 1.0 is affected by an insecure file upload vulnerability. A low privileged user can upload malicious PHP files by updating their profile image to gain remote code execution.