Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

University Management System — Vulnerabilities & Security Advisories 17

All 17 CVE vulnerabilities found in University Management System, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for the University Management System product, specifically focusing on software weaknesses categorized under the vendor tag for educational administration platforms. The collection encompasses a comprehensive range of security flaws, including remote code execution, SQL injection, and privilege escalation issues, documented from the initial public release of the system through the most recent security bulletin. Visitors can utilize this resource to track the vendor's official security advisories, analyze the characteristics of specific weakness classes affecting campus operations, or review the complete historical vulnerability record for the University Management System to assess long-term risk trends. The data is compiled from multiple trusted sources to provide a unified view of known exposures without requiring cross-referencing of disparate databases. By centralizing these findings, the page supports security professionals in performing accurate threat assessments and aids administrators in prioritizing patching efforts for critical infrastructure. All entries are standardized to ensure consistency in severity ratings and affected versions, facilitating efficient decision-making for IT teams responsible for maintaining institutional data integrity. This repository serves as a definitive reference for understanding the security posture of the system over time, enabling proactive defense strategies against evolving cyber threats targeting higher education environments.

Vendor: CodeAstro

CVE ID Title CVSS Severity Published
CVE-2026-4474 itsourcecode University Management System admin_single_student_update.php cross site scripting CWE-79 2.4 Low 2026-03-20
CVE-2026-4356 itsourcecode University Management System add_result.php cross site scripting CWE-79 2.4 Low 2026-03-18
CVE-2026-3982 itsourcecode University Management System view_result.php cross site scripting CWE-79 4.3 Medium 2026-03-12
CVE-2026-3944 itsourcecode University Management System att_add.php sql injection CWE-89 7.3 High 2026-03-11
CVE-2026-3765 itsourcecode University Management System att_single_view.php sql injection CWE-89 7.3 High 2026-03-08
CVE-2026-3760 itsourcecode University Management System view_result.php sql injection CWE-89 7.3 High 2026-03-08
CVE-2026-3747 itsourcecode University Management System add_result.php sql injection CWE-89 7.3 High 2026-03-08
CVE-2026-3740 itsourcecode University Management System admin_search_student.php sql injection CWE-89 7.3 High 2026-03-08
CVE-2026-3413 itsourcecode University Management System admin_single_student.php sql injection CWE-89 7.3 High 2026-03-02
CVE-2026-3412 itsourcecode University Management System att_single_view.php cross site scripting CWE-79 4.3 Medium 2026-03-02
CVE-2026-3411 itsourcecode University Management System admin_single_student_update.php sql injection CWE-89 7.3 High 2026-03-02
CVE-2024-6958 itsourcecode University Management System Avatar File st_update.php unrestricted upload CWE-434 6.3 Medium 2024-07-21
CVE-2024-6957 itsourcecode University Management System Login functions.php sql injection CWE-89 7.3 High 2024-07-21
CVE-2024-6956 itsourcecode University Management System view_cgpa.php sql injection CWE-89 6.3 Medium 2024-07-21
CVE-2024-6952 itsourcecode University Management System sql injection CWE-89 6.3 Medium 2024-07-21
CVE-2024-1266 CodeAstro University Management System Student Registration Form st_reg.php cross site scripting CWE-79 2.4 Low 2024-02-07
CVE-2024-1265 CodeAstro University Management System Attendance Management att_add.php cross site scripting CWE-79 2.4 Low 2024-02-07

All 17 known CVE vulnerabilities affecting University Management System with full Chinese analysis, references, and POCs where available.