Vulnerabilities (CVE)

Filtered by vendor Online Student Admission System Project Subscribe
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-48149 1 Online Student Admission System Project 1 Online Student Admission System 2024-11-21 N/A 9.8 CRITICAL
Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via the username parameter.
CVE-2022-2681 1 Online Student Admission System Project 1 Online Student Admission System 2024-11-21 N/A 3.5 LOW
A vulnerability classified as problematic was found in SourceCodester Online Student Admission System. Affected by this vulnerability is an unknown functionality of the file edit-profile.php of the component Student User Page. The manipulation with the input <script>alert(/xss/)</script> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205669 was assigned to this vulnerability.
CVE-2021-37372 1 Online Student Admission System Project 1 Online Student Admission System 2024-11-21 6.5 MEDIUM 8.8 HIGH
Online Student Admission System 1.0 is affected by an insecure file upload vulnerability. A low privileged user can upload malicious PHP files by updating their profile image to gain remote code execution.
CVE-2021-37371 1 Online Student Admission System Project 1 Online Student Admission System 2024-11-21 7.5 HIGH 9.8 CRITICAL
Online Student Admission System 1.0 is affected by an unauthenticated SQL injection bypass vulnerability in /admin/login.php.