Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Student Management System — Vulnerabilities & Security Advisories 37

All 37 CVE vulnerabilities found in Student Management System, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for the Student Management System, a web-based application designed for institutional academic administration. The collection encompasses multiple vulnerability classes, including cross-site scripting, SQL injection, authentication bypass, and insufficient access control, covering advisories released over the past five years. Readers can use this resource to track the vendor's security patches, analyze recurring weakness patterns, and review the product's historical vulnerability trend to assess its overall security posture.

Vendor: SourceCodester

CVE ID Title CVSS Severity Published
CVE-2026-86674 ningzichun Student Management System login.php session_start session fixiation CWE-384 6.3 Medium 2026-09-08
CVE-2026-86673 ningzichun Student Management System Database Connection database.php mysqli_connect hard-coded credentials CWE-798 7.3 High 2026-09-08
CVE-2026-86672 ningzichun Student Management System Backup example.7z information disclosure CWE-200 5.3 Medium 2026-09-08
CVE-2026-82699 sambitraj Student Management System Password aca.sql cleartext storage CWE-312 2.7 Low 2026-08-31
CVE-2026-82553 sambitraj Student Management System Student Dashboard student_dashboard.php mysqli_query improper authorization CWE-285 6.3 Medium 2026-08-30
CVE-2026-2943 SapneshNaik Student Management System index.php cross site scripting CWE-79 4.3 Medium 2026-02-22
CVE-2026-2939 itsourcecode Student Management System Add Student add_student cross site scripting CWE-79 2.4 Low 2026-02-22
CVE-2026-2014 itsourcecode Student Management System index.php sql injection CWE-89 7.3 High 2026-02-06
CVE-2026-2013 itsourcecode Student Management System index.php sql injection CWE-89 7.3 High 2026-02-06
CVE-2026-2012 itsourcecode Student Management System index.php sql injection CWE-89 7.3 High 2026-02-06
CVE-2026-2011 itsourcecode Student Management System controller.php sql injection CWE-89 7.3 High 2026-02-06
CVE-2025-15168 itsourcecode Student Management System statistical.php sql injection CWE-89 7.3 High 2025-12-29
CVE-2025-15078 itsourcecode Student Management System list_report.php sql injection CWE-89 7.3 High 2025-12-25
CVE-2025-15077 itsourcecode Student Management System form137.php sql injection CWE-89 7.3 High 2025-12-25
CVE-2025-15075 itsourcecode Student Management System student_p.php sql injection CWE-89 7.3 High 2025-12-25
CVE-2025-15034 itsourcecode Student Management System record.php sql injection CWE-89 7.3 High 2025-12-23
CVE-2025-14967 itsourcecode Student Management System candidates_report.php sql injection CWE-89 7.3 High 2025-12-19
CVE-2025-14653 itsourcecode Student Management System addrecord.php sql injection CWE-89 7.3 High 2025-12-14
CVE-2025-14644 itsourcecode Student Management System update_subject.php sql injection CWE-89 7.3 High 2025-12-14
CVE-2025-14639 itsourcecode Student Management System uprec.php sql injection CWE-89 7.3 High 2025-12-14
CVE-2025-14588 itsourcecode Student Management System update_program.php sql injection CWE-89 7.3 High 2025-12-13
CVE-2025-14578 itsourcecode Student Management System update_account.php sql injection CWE-89 7.3 High 2025-12-12
CVE-2025-14337 itsourcecode Student Management System new_grade.php sql injection CWE-89 7.3 High 2025-12-09
CVE-2025-14336 itsourcecode Student Management System promote.php sql injection CWE-89 7.3 High 2025-12-09
CVE-2025-14335 itsourcecode Student Management System new_school_year.php sql injection CWE-89 7.3 High 2025-12-09
CVE-2025-14334 itsourcecode Student Management System new_adviser.php sql injection CWE-89 7.3 High 2025-12-09
CVE-2025-14258 itsourcecode Student Management System newsubject.php sql injection CWE-89 7.3 High 2025-12-08
CVE-2025-14257 itsourcecode Student Management System newrecord.php sql injection CWE-89 7.3 High 2025-12-08
CVE-2025-14256 itsourcecode Student Management System newcurriculm.php sql injection CWE-89 7.3 High 2025-12-08
CVE-2025-14226 itsourcecode Student Management System edit_user.php sql injection CWE-89 7.3 High 2025-12-08

All 37 known CVE vulnerabilities affecting Student Management System with full Chinese analysis, references, and POCs where available.