A vulnerability was identified in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This vulnerability affects unknown code of the file buslocation.php of the component HTTP GET Parameter Handler. The manipulation of the argument bus_id...
Product
ProjectsAndPrograms School Management System vulnerabilities
9 published CVES affecting ProjectsAndPrograms School Management System, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 9
- Critical
- 0
- High
- 0
- Medium
- 9
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest ProjectsAndPrograms School Management System CVEs
Newest publication first
-
MediumCVSS 6.9 EPSS 0.26%
-
MediumCVSS 5.3 EPSS 0.21%
A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. The affected element is an unknown function of the file /admin_panel/settings.php of the component Profile Picture Handler. This manipulation of the argument File...
-
MediumCVSS 6.9 EPSS 0.54%
A vulnerability was found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This affects an unknown part. Performing manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has be...
-
CVE-2025-11660 ProjectsAndPrograms School Management System uploadSllyabus.php unrestricted upload
PublishedMediumCVSS 6.9 EPSS 0.46%A vulnerability has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected by this issue is some unknown functionality of the file /assets/uploadSllyabus.php. Such manipulation of the argument File leads to unrestricted...
-
CVE-2025-11659 ProjectsAndPrograms School Management System uploadNotes.php unrestricted upload
PublishedMediumCVSS 6.9 EPSS 0.59%A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected by this vulnerability is an unknown functionality of the file /assets/uploadNotes.php. This manipulation of the argument File causes unrestricted upload....
-
CVE-2025-11658 ProjectsAndPrograms School Management System changeSllyabus.php unrestricted upload
PublishedMediumCVSS 6.9 EPSS 0.46%A vulnerability was detected in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected is an unknown function of the file /assets/changeSllyabus.php. The manipulation of the argument File results in unrestricted upload. The attack ma...
-
CVE-2025-11657 ProjectsAndPrograms School Management System createNotice.php unrestricted upload
PublishedMediumCVSS 6.9 EPSS 0.59%A security vulnerability has been detected in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This impacts an unknown function of the file /assets/createNotice.php. The manipulation of the argument File leads to unrestricted upload. Th...
-
CVE-2025-11656 ProjectsAndPrograms School Management System editNotes.php unrestricted upload
PublishedMediumCVSS 6.9 EPSS 0.59%A weakness has been identified in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This affects an unknown function of the file /assets/editNotes.php. Executing manipulation of the argument File can lead to unrestricted upload. The atta...
-
CVE-2025-11056 ProjectsAndPrograms School Management System select-students.php sql injection
PublishedMediumCVSS 5.3 EPSS 0.41%A flaw has been found in ProjectsAndPrograms School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file owner_panel/fetch-data/select-students.php. This manipulation of the argument select causes sql injection. Remote exploitation of the...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.