CVE-2022-2643

CVE-2022-2643 affects SourceCodester Online Admission System, specifically the POST Parameter Handler component. The vulnerability arises from manipulation of the shift argument, enabling SQL injection. The issue is exploitable remotely and, according to sources, exploits have been disclosed publ...

CVE-2022-2644

CVE-2022-2644 affects the SourceCodester Online Admission System, specifically the GET Parameter Handler’s eid parameter, where manipulation leads to SQL injection. Multiple connected sources confirm a critical impact with public disclosure of exploits (VDB-205565) and no consistent vendor fix in...

CVE-2022-2646

SourceCodester Online Admission System is affected by a cross-site scripting vulnerability in an unknown function of index.php. The eid parameter can be manipulated with input such as 8, allowing remote exploitation. Multiple connected reports corroborate the flaw and its remote abuse. Several so...

CVE-2022-2767

The CVE-2022-2767 entry concerns SourceCodester Online Admission System, with a cross-site scripting vulnerability in an unknown part of /index.php. The issue arises from manipulating the student_add parameter, allowing remote initiation of the attack. The exploit has been disclosed publicly and ...

CVE-2024-0783

CVE-2024-0783 affects Project Worlds Online Admission System 1.0, with a vulnerability in the processing of the file documents.php that enables unrestricted file upload. The issue can be exploited remotely and has been widely reported across multiple feeds (e.g., Red Hat, Vulners-related enrichme...