CVE-2023-41506

The Student Enrollment In PHP v1.0 system contains an arbitrary file upload vulnerability within the Update/Edit Student's Profile Picture (or Avatar) function. This flaw allows an attacker to upload a specially crafted PHP file , which can result in the execution of arbitrary code on the server....

CVE-2023-41503

The open-source student enrollment system Student Enrollment In PHP version 1.0 is susceptible to a SQL injection vulnerability. The root cause is located within the Login function , which could allow an attacker to execute unauthorized database commands. As a remediation, it is recommended to di...

CVE-2025-7191

CVE-2025-7191 affects code-projects Student Enrollment System 1.0. The vulnerability is a SQL injection in the /login.php file caused by manipulating the Username parameter. Attack is network-based and can be exploited remotely; exploitation has been disclosed publicly. Several connected sources ...

CVE-2023-41505

The open-source student enrollment system Student Enrollment In PHP v1.0 is vulnerable to an arbitrary file upload in the Add Student's Profile Picture function. This flaw allows an attacker to execute arbitrary code by uploading a crafted PHP file . While no specific patch version is identified,...

CVE-2023-41504

The Student Enrollment In PHP version 1.0 is affected by a SQL Injection vulnerability (CWE-89) located within the Student Search function. Attackers can exploit this flaw to execute arbitrary code , potentially leading to unauthorized access or data manipulation . While no specific real-world in...