Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Low | 2.1 | CVE-2026-105809 |
A vulnerability was identified in SourceCodester Simple Student Information System 1.0
SourceCodesterSourceCodester Simple Student Information System
|
NVD | |||
|
CVE-2026-105809A vulnerability was identified in SourceCodester Simple Student Information System 1.0
From the advisoryA vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used. Impact if exploitedConfidentialityNone IntegrityLow AvailabilityNone
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X AffectsSourceCodesterSourceCodester Simple Student Information System
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Low | 2.0 | CVE-2026-105808 |
A vulnerability was determined in SourceCodester Simple Student Information System 1.0
SourceCodesterSourceCodester Simple Student Information System
|
NVD | |||
|
CVE-2026-105808A vulnerability was determined in SourceCodester Simple Student Information System 1.0
From the advisoryA vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. Impact if exploitedConfidentialityNone IntegrityLow AvailabilityNone
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X AffectsSourceCodesterSourceCodester Simple Student Information System
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.9 | CVE-2026-105807 |
A vulnerability was found in SourceCodester Simple Student Information System 1.0
SourceCodesterSourceCodester Simple Student Information System
|
NVD | |||
|
CVE-2026-105807A vulnerability was found in SourceCodester Simple Student Information System 1.0
From the advisoryA vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely. Impact if exploitedConfidentialityLow IntegrityLow AvailabilityLow
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X AffectsSourceCodesterSourceCodester Simple Student Information System
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||