CVE-2026-90514

SourceCodester School Registration and Fee System 1.0 is vulnerable to SQL injection via the Status argument in the file /bilal/normal/save_stud.php (function unspecified). The attack is remote and requires no authentication , rated CVSS 3.1: 7.3 (HIGH) with low impact on confidentiality, integri...

CVE-2021-40261

Multiple Cross Site Scripting XSS vulnerabilities exist in SourceCodester CASAP Automated Enrollment System 1.0 via the 1 userusername and 2 category parameters in saveclass.php, the 3 firstname, 4 class, and 5 status parameters in studenttable.php, the 6 category and 7 classname parameters in...