← Back

Simple College Website Project

simple_college_website_project

5 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Simple College Website
simple_college_website
5 CVEs

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-40089
1Simple College Website Project
1Simple College Website
May 27, 2025
Sep 22, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A remote file inclusion (RFI) vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploitable when the directive allow_url_include is set...Show more
A remote file inclusion (RFI) vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploitable when the directive allow_url_include is set to On.Show less
CVE-2022-40088
1Simple College Website Project
1Simple College Website
May 27, 2025
Sep 22, 2022
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Simple College Website v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /college_website/index.php?page=. This vulnerability allows attackers to execute arbitrary web...Show more
Simple College Website v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /college_website/index.php?page=. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter.Show less
CVE-2022-40087
1Simple College Website Project
1Simple College Website
May 27, 2025
Sep 22, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Simple College Website v1.0 was discovered to contain an arbitrary file write vulnerability via the function file_put_contents(). This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
CVE-2021-44593
1Simple College Website Project
1Simple College Website
Nov 21, 2024
Jan 21, 2022
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
Simple College Website 1.0 is vulnerable to unauthenticated file upload & remote code execution via UNION-based SQL injection in the username parameter on /admin/login.php.
CVE-2021-26232
1Simple College Website Project
1Simple College Website
Nov 21, 2024
Jul 22, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
SQL injection vulnerability in SourceCodester Simple College Website v 1.0 allows remote attackers to execute arbitrary SQL statements via the id parameter to news.php.