CVE-2025-5649

CVE-2025-5649 affects SourceCodester Student Result Management System 1.0, specifically the /admin/core/new_user (Register Interface) file. The fault is improper access controls, enabling a remote attack. Public exploit disclosure is noted in the initial description, and multiple connected source...

CVE-2025-5726

CVE-2025-5726 affects SourceCodester Customer Result Management System v1.0, specifically the Division System Page’s /script/academic/division-system component. The vulnerability arises from manipulating the Division argument, causing a cross-site scripting (XSS) condition. Attacks can be conduct...

CVE-2025-5721

CVE-2025-5721 affects SourceCodester Student Result Management System v1.0, specifically the Profile Setting Page’s file path /script/academic/core/update_profile. The vulnerability is a stored cross-site scripting issue caused by improper handling/manipulation, enabling remote initiation. Public...

CVE-2025-5727

CVE-2025-5727 affects SourceCodester Student Result Management System 1.0. The vulnerability lies in the Announcement Page component, specifically the /script/academic/announcement file where manipulating the Title parameter enables cross-site scripting. It can be exploited remotely, and public d...

CVE-2025-6475

CVE-2025-6475 affects SourceCodester Student Result Management System 1.0, specifically the Manage Students Module and the file path /script/admin/manage_students. The vulnerability is a cross-site scripting flaw arising from handling input in that file, exploitable remotely with public disclosur...

CVE-2025-6477

SourceCodester Student Result Management System 1.0 contains an XSS vulnerability in the System Settings Page (file path: /script/admin/system) triggered by manipulating the School Name parameter. The issue is exploitable remotely, with public exploit disclosure cited. Affected functionality is u...