alumni management system vulnerabilities and fixes

Recent CVEs affecting alumni management system, with upgrade or downgrade steps. 8 tracked.

Also searched as: alumnimanagementsystem.

alumni management system has 8 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-11-20. Highest priority: CVE-2020-28070 (score 69/100).

CVE-2025-13059 MEDIUM 6.3 DOWNGRADE A weakness has been identified in SourceCodester Alumni Management System 1.0
CVE-2025-13468 MEDIUM 5.4 DOWNGRADE A weakness has been identified in SourceCodester Alumni Management System 1.0
CVE-2021-25212 CRITICAL 9.8 DOWNGRADE SQL injection vulnerability in SourceCodester Alumni Management System v 1.0 allows remote attackers to execut
CVE-2021-25210 CRITICAL 9.8 DOWNGRADE Arbitrary file upload vulnerability in SourceCodester Alumni Management System v 1.0 allows attackers to execu
CVE-2020-29214 CRITICAL 9.8 DOWNGRADE SQL injection vulnerability in SourceCodester Alumni Management System 1.0 allows the user to inject SQL paylo
CVE-2020-28072 HIGH 7.2 DOWNGRADE A Remote Code Execution vulnerability exists in DourceCodester Alumni Management System 1.0
CVE-2020-28071 MEDIUM 4.8 DOWNGRADE SourceCodester Alumni Management System 1.0 is affected by cross-site Scripting (XSS) in /admin/gallery.php
CVE-2020-28070 CRITICAL 9.8 DOWNGRADE SourceCodester Alumni Management System 1.0 is affected by SQL injection causing arbitrary remote code executi

FAQ

How do I fix alumni management system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is alumni management system being exploited right now?

None of the tracked alumni management system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which alumni management system CVE should I patch first?

CVE-2020-28070 currently ranks highest (69/100): SourceCodester Alumni Management System 1.0 is affected by SQL injection causing arbitrary remote code executi.

RSS feed for alumni management system · ← Back to latest CVEs