← Back

Online Enrollment Management System

online_enrollment_management_system

Vendor: Online Enrollment Management System Project • 4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-40579
1Online Enrollment Management System Project
1Online Enrollment Management System
Nov 21, 2024
Dec 28, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
https://www.sourcecodester.com/ Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 is affected by: Incorrect Access Control. The impact is: gain privileges (remote).
CVE-2021-44599
1Online Enrollment Management System Project
1Online Enrollment Management System
Nov 21, 2024
Dec 23, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to SQL injection attacks. A crafted payload injects a SQL sub-query that calls MySQL's load_file function with a UNC file path...Show more
The id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to SQL injection attacks. A crafted payload injects a SQL sub-query that calls MySQL's load_file function with a UNC file path that references a URL on an external domain. The application interacted with that domain, indicating that the injected SQL query was executed. The attacker can retrieve sensitive information for all users of this system.Show less
CVE-2021-40578
1Online Enrollment Management System Project
1Online Enrollment Management System
Nov 21, 2024
Dec 7, 2021
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Authenticated Blind & Error-based SQL injection vulnerability was discovered in Online Enrollment Management System in PHP and PayPal Free Source Code 1.0, that allows attackers to obtain sensitive information and execut...Show more
Authenticated Blind & Error-based SQL injection vulnerability was discovered in Online Enrollment Management System in PHP and PayPal Free Source Code 1.0, that allows attackers to obtain sensitive information and execute arbitrary SQL commands via IDNO parameter.Show less
CVE-2021-40577
1Online Enrollment Management System Project
1Online Enrollment Management System
Nov 21, 2024
Nov 8, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 in the Add-Users page via the Name parameter.