CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 17/11/2022 |
| CVE-2022-32420 | 高危8.8 | College Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /College/admin/teacher.php. This vulnerability is exploited via a crafted PHP file. | 01/07/2022 |
| CVE-2022-30404 | 高危7.2 | College Management System v1.0 is vulnerable to SQL Injection via /College_Management_System/admin/display-teacher.php?teacher_id=. | 13/05/2022 |
| CVE-2022-28079 | 高危8.8 | College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter. | 05/05/2022 |
| CVE-2020-25409 | 严重9.8 | Projectsworlds College Management System Php 1.0 is vulnerable to SQL injection issues over multiple parameters. | 24/05/2021 |
| CVE-2020-25408 | 中危6.5 | A Cross-Site Request Forgery (CSRF) vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, faculty, teacher, subject, scores, location, and article data. | 24/05/2021 |
| CVE-2020-26051 | 严重9.8 | College Management System Php 1.0 suffers from SQL injection vulnerabilities in the index.php page from POST parameters 'unametxt' and 'pwdtxt', which are not filtered before passing a SQL query. | 08/02/2021 |