Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-26051 1 College Management System Project 1 College Management System 2024-11-21 9.8 Critical
College Management System Php 1.0 suffers from SQL injection vulnerabilities in the index.php page from POST parameters 'unametxt' and 'pwdtxt', which are not filtered before passing a SQL query.
CVE-2020-25409 1 College Management System Project 1 College Management System 2024-11-21 9.8 Critical
Projectsworlds College Management System Php 1.0 is vulnerable to SQL injection issues over multiple parameters.
CVE-2020-25408 1 College Management System Project 1 College Management System 2024-11-21 6.5 Medium
A Cross-Site Request Forgery (CSRF) vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, faculty, teacher, subject, scores, location, and article data.