← Back

Simple College Project

simple_college_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Simple College
simple_college
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-28173
1Simple College Project
1Simple College
Jun 17, 2026
Mar 31, 2021
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
Simple College Website 1.0 allows a user to conduct remote code execution via /alumni/admin/ajax.php?action=save_settings when uploading a malicious file using the image upload functionality, which is stored in /alumni/a...Show more
Simple College Website 1.0 allows a user to conduct remote code execution via /alumni/admin/ajax.php?action=save_settings when uploading a malicious file using the image upload functionality, which is stored in /alumni/admin/assets/uploads/.Show less
CVE-2020-28172
1Simple College Project
1Simple College
Jun 17, 2026
Mar 31, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A SQL injection vulnerability in Simple College Website 1.0 allows remote unauthenticated attackers to bypass the admin authentication mechanism in college_website/admin/ajax.php?action=login, thus gaining access to the...Show more
A SQL injection vulnerability in Simple College Website 1.0 allows remote unauthenticated attackers to bypass the admin authentication mechanism in college_website/admin/ajax.php?action=login, thus gaining access to the website administrative panel.Show less