CVE-2021-25212

The CVE-2021-25212 entry describes a SQL injection vulnerability in SourceCodester Alumni Management System v1.0. The flaw is exploitable remotely through the id parameter of manage_event.php, allowing arbitrary SQL statements to be executed. This is corroborated by multiple connected records (e....

CVE-2020-28070

The CVE-2020-28070 entry affects SourceCodester Alumni Management System 1.0. A SQL injection vulnerability exists in view_event.php via the GET parameter id, enabling arbitrary remote code execution. Public sources (e.g., PacketStorm) describe blind SQL injection exploitable through the id param...

CVE-2020-29214

CVE-2020-29214 affects SourceCodester’s Alumni Management System 1.0. The vulnerability is a SQL injection in admin/login.php caused by unsanitized input, enabling unauthenticated attackers to bypass login and gain access to administrative data. Documented impact includes authentication bypass wi...

CVE-2021-25210

The CVE-2021-25210 entry concerns SourceCodester Alumni Management System v1.0. Affected software: SourceCodester Alumni Management System; vulnerable component: the file upload pathway (manage_event.php). Root cause: arbitrary file upload allows an attacker to upload and execute arbitrary code o...

CVE-2020-28071

SourceCodester Alumni Management System 1.0 is affected by a Stored Cross-Site Scripting (XSS) in /admin/gallery.php. After admin authentication, an attacker can supply an XSS payload in the description field named “about” when uploading a gallery image, triggering stored XSS that can affect both...

CVE-2020-28072

CVE-2020-28072 affects DourceCodester Alumni Management System 1.0. An authenticated attacker can upload arbitrary PHP files via gallery.php and execute them on the server, achieving Remote Code Execution. Root cause is improper file upload handling enabling arbitrary file upload and execution. E...