PT-2026-26567

A flaw has been found in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /admin single student update.php. This manipulation of the argument st name causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may...

CVE-2025-13679 Tutor LMS <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via tutor_order_details

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the getorderbyid function in all versions up to, and including, 3.9.3. This makes it possible for authenticated attackers, with...

PHPGurukul Online Course Registration 安全漏洞

Online Course Registration is an online course registration system. Online Course Registration suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter studentname in the file /admin/student-registration.php. An...

CVE-2024-1265

A vulnerability classified as problematic has been found in CodeAstro University Management System 1.0. Affected is an unknown function of the file /attadd.php of the component Attendance Management. The manipulation of the argument Student Name leads to cross site scripting. It is possible to...

PT-2024-17691 · Unknown · Codeastro University Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro University Management System version 1.0 Description: A problematic vulnerability has been found in the Attendance Management component, specifically in the file /att add.php. The manipulation of the Student Name argument leads to...

CodeAstro University Management System Cross-Site Scripting Vulnerability

University Management System is a university management system. A cross-site scripting vulnerability exists in CodeAstro University Management System version 1.0, which stems from the fact that incorrect manipulation of the Student Name parameter can lead to cross-site scripting...