Alumni Management System Project Alumni Management System
6 CVEs affecting Alumni Management System Project Alumni Management System. Latest disclosed: 2021-07-22. Critical: 4, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-25212 | Critical | 9.8 | 2021-07-22 | SQL injection vulnerability in SourceCodester Alumni Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter… |
CVE-2021-25210 | Critical | 9.8 | 2021-07-22 | Arbitrary file upload vulnerability in SourceCodester Alumni Management System v 1.0 allows attackers to execute arbitrary code, via the file upload to manage_… |
CVE-2020-29214 | Critical | 9.8 | 2021-06-15 | SQL injection vulnerability in SourceCodester Alumni Management System 1.0 allows the user to inject SQL payload to bypass the authentication via admin/login.p… |
CVE-2020-28070 | Critical | 9.8 | 2020-12-23 | SourceCodester Alumni Management System 1.0 is affected by SQL injection causing arbitrary remote code execution from GET input in view_event.php via the 'id'… |
CVE-2020-28072 | High | 7.2 | 2020-12-15 | A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0. An authenticated attacker can upload arbitrary file in the gallery… |
CVE-2020-28071 | Medium | 4.8 | 2020-12-23 | SourceCodester Alumni Management System 1.0 is affected by cross-site Scripting (XSS) in /admin/gallery.php. After the admin authentication an attacker can upl… |