CVE-2025-5723

CVE-2025-5723 affects SourceCodester Student Result Management System 1.0. The vulnerability is a cross-site scripting (XSS) issue in the Classes Page, specifically through manipulation of the Class Name argument within /script/academic/classes. The impact is consistent with an attacker potential...

CVE-2025-5722

CVE-2025-5722 affects SourceCodester Student Result Management System 1.0, specifically the Add Academic Term function at /script/academic/terms. The vulnerability arises from manipulation of the Academic Term argument, leading to cross-site scripting. The issue can be exploited remotely and the ...

CVE-2025-5724

CVE-2025-5724 affects SourceCodester Student Result Management System 1.0, specifically the Subjects Page: an unknown function in /script/academic/subjects lets an attacker manipulate the Subject parameter to trigger cross-site scripting. The vulnerability is exploitable remotely and the exploit ...

CVE-2025-5725

CVE-2025-5725 affects SourceCodester Student Result Management System 1.0, specifically the Grading System Page component’s /script/academic/grading-system. The Remark parameter manipulation leads to cross-site scripting (XSS) and the attack can be launched remotely; the exploit has been disclose...

CVE-2025-4898

CVE-2025-4898 affects SourceCodester Student Result Management System 1.0. The vulnerability resides in the Logo File Handler inside the function handling unlink in the file update_system.php, where manipulation of the argument old_logo enables a path traversal . Exploitation can be performed rem...

CVE-2026-2984

SourceCodester SourceCodester Student Result Management System 1.0 is affected by a vulnerability in /admin/core/drop_user.php where manipulation of the ID parameter can cause a remote denial of service. The initial entry provides CVSS metrics (2.x/3.x/4.x) and notes a publicly available exploit,...

CVE-2025-4720

The CVE-2025-4720 entry concerns SourceCodester Student Result Management System 1.0, with a path traversal vulnerability in the file academic/core/drop_student.php. The issue arises from unsafely handling the img parameter, allowing an attacker to traverse the filesystem and potentially access r...

CVE-2025-4912

The CVE-2025-4912 affects SourceCodester Student Result Management System 1.0, specifically the Image File Handler’s /admin/core/update_student.php. The vulnerability arises from manipulating the old_photo parameter, enabling path traversal. It is exploitable remotely and has been publicly disclo...

CVE-2026-2938

The CVE-2026-2938 entry relates to SourceCodester Student Result Management System 1.0, affecting the file /srms/script/admin/core/update_smtp.php. The root cause is an unspecified function allowing improper access controls, enabling remote initiation of an attack. Public exploit disclosure is no...

CVE-2026-2983

CVE-2026-2983 affects SourceCodester Student Result Management System 1.0. The vulnerability is in the Bulk Import component, specifically the unknown function handling the File argument in /admin/core/import_users.php, where manipulating File leads to improper access controls. Remote exploitatio...