<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: college management system</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-3767: A weakness has been identified in itsourcecode sanitize or validate this input 1.0</title><link>https://patchthecve.com/cve/CVE-2026-3767.html</link><guid>https://patchthecve.com/cve/CVE-2026-3767.html</guid><pubDate>Wed, 17 Jun 2026 10:44:10 +0000</pubDate><description>MEDIUM 6.3: A weakness has been identified in itsourcecode sanitize or validate this input 1.0. Affected is an unknown function of the file /admin/teacher-attendance.php. Executing a manipulation of the argument teacher_id can lead to sql injection. The attack may be launched remotely. The exploit has been made</description></item><item><title>CVE-2026-3487: A vulnerability was found in itsourcecode College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2026-3487.html</link><guid>https://patchthecve.com/cve/CVE-2026-3487.html</guid><pubDate>Wed, 17 Jun 2026 10:43:39 +0000</pubDate><description>MEDIUM 4.7: A vulnerability was found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/class-result.php. Performing a manipulation of the argument course_code results in sql injection. The attack can be initiated remotely. The exploit has been made pub</description></item><item><title>CVE-2026-3486: A vulnerability has been found in itsourcecode College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2026-3486.html</link><guid>https://patchthecve.com/cve/CVE-2026-3486.html</guid><pubDate>Wed, 17 Jun 2026 10:43:39 +0000</pubDate><description>MEDIUM 4.7: A vulnerability has been found in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /admin/student-fee.php. Such manipulation of the argument roll_no leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to </description></item><item><title>CVE-2026-3152: A flaw has been found in itsourcecode College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2026-3152.html</link><guid>https://patchthecve.com/cve/CVE-2026-3152.html</guid><pubDate>Wed, 17 Jun 2026 10:43:07 +0000</pubDate><description>HIGH 7.3: A flaw has been found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/teacher-salary.php. This manipulation of the argument teacher_id causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and</description></item><item><title>CVE-2026-3151: A vulnerability was detected in itsourcecode College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2026-3151.html</link><guid>https://patchthecve.com/cve/CVE-2026-3151.html</guid><pubDate>Wed, 17 Jun 2026 10:43:07 +0000</pubDate><description>HIGH 7.3: A vulnerability was detected in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /login/login.php. The manipulation of the argument email results in sql injection. The attack may be performed from remote. The exploit is now public and may be used.</description></item><item><title>CVE-2026-3150: A security vulnerability has been detected in itsourcecode College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2026-3150.html</link><guid>https://patchthecve.com/cve/CVE-2026-3150.html</guid><pubDate>Wed, 17 Jun 2026 10:43:07 +0000</pubDate><description>MEDIUM 6.3: A security vulnerability has been detected in itsourcecode College Management System 1.0. This affects an unknown part of the file /admin/display-teacher.php. The manipulation of the argument teacher_id leads to sql injection. The attack is possible to be carried out remotely. The exploit has been d</description></item><item><title>CVE-2026-3149: A weakness has been identified in itsourcecode College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2026-3149.html</link><guid>https://patchthecve.com/cve/CVE-2026-3149.html</guid><pubDate>Wed, 17 Jun 2026 10:43:07 +0000</pubDate><description>MEDIUM 6.3: A weakness has been identified in itsourcecode College Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/asign-single-student-subjects.php. Executing a manipulation of the argument course_code can lead to sql injection. The attack can be executed remotely</description></item><item><title>CVE-2025-2973: A vulnerability, which was classified as critical, was found in code-projects College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-2973.html</link><guid>https://patchthecve.com/cve/CVE-2025-2973.html</guid><pubDate>Wed, 17 Jun 2026 09:07:56 +0000</pubDate><description>MEDIUM 6.3: A vulnerability, which was classified as critical, was found in code-projects College Management System 1.0. This affects an unknown part of the file /Admin/student.php. The manipulation of the argument profile_image leads to unrestricted upload. It is possible to initiate the attack remotely. The e</description></item><item><title>CVE-2025-1850: A vulnerability, which was classified as critical, has been found in Codezips College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-1850.html</link><guid>https://patchthecve.com/cve/CVE-2025-1850.html</guid><pubDate>Wed, 17 Jun 2026 08:39:53 +0000</pubDate><description>HIGH 7.3: A vulnerability, which was classified as critical, has been found in Codezips College Management System 1.0. Affected by this issue is some unknown functionality of the file /university.php. The manipulation of the argument book_name leads to sql injection. The attack may be launched remotely. The e</description></item><item><title>CVE-2024-13025: A vulnerability was found in Codezips College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-13025.html</link><guid>https://patchthecve.com/cve/CVE-2024-13025.html</guid><pubDate>Wed, 17 Jun 2026 07:01:00 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in Codezips College Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Front-end/faculty.php. The manipulation of the argument book_name/book_author leads to sql injection. It is possible to launch the attack remotely. Th</description></item><item><title>CVE-2024-7681: A vulnerability was found in code-projects College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-7681.html</link><guid>https://patchthecve.com/cve/CVE-2024-7681.html</guid><pubDate>Wed, 17 Jun 2026 08:20:42 +0000</pubDate><description>HIGH 7.3: A vulnerability was found in code-projects College Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component Login Page. The manipulation of the argument email/password leads to sql injection. The attack can be initiated r</description></item><item><title>CVE-2024-5376: A vulnerability was found in Kashipara College Management System 1.0 and classified as problematic</title><link>https://patchthecve.com/cve/CVE-2024-5376.html</link><guid>https://patchthecve.com/cve/CVE-2024-5376.html</guid><pubDate>Wed, 17 Jun 2026 08:15:49 +0000</pubDate><description>LOW 3.5: A vulnerability was found in Kashipara College Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file view_each_faculty.php. The manipulation of the argument id leads to cross site scripting. The attack may be launched remotely. The expl</description></item><item><title>CVE-2024-5375: A vulnerability has been found in Kashipara College Management System 1.0 and classified as problematic</title><link>https://patchthecve.com/cve/CVE-2024-5375.html</link><guid>https://patchthecve.com/cve/CVE-2024-5375.html</guid><pubDate>Wed, 17 Jun 2026 08:15:49 +0000</pubDate><description>LOW 3.5: A vulnerability has been found in Kashipara College Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file submit_student.php. The manipulation of the argument address leads to cross site scripting. The attack can be launched remot</description></item><item><title>CVE-2024-5374: A vulnerability, which was classified as problematic, was found in Kashipara College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-5374.html</link><guid>https://patchthecve.com/cve/CVE-2024-5374.html</guid><pubDate>Wed, 17 Jun 2026 08:15:48 +0000</pubDate><description>LOW 3.5: A vulnerability, which was classified as problematic, was found in Kashipara College Management System 1.0. Affected is an unknown function of the file submit_new_faculty.php. The manipulation of the argument address leads to cross site scripting. It is possible to launch the attack remotely. The ex</description></item><item><title>CVE-2024-5373: A vulnerability, which was classified as problematic, has been found in Kashipara College Management System 1.</title><link>https://patchthecve.com/cve/CVE-2024-5373.html</link><guid>https://patchthecve.com/cve/CVE-2024-5373.html</guid><pubDate>Wed, 17 Jun 2026 08:15:48 +0000</pubDate><description>LOW 3.5: A vulnerability, which was classified as problematic, has been found in Kashipara College Management System 1.0. This issue affects some unknown processing of the file submit_login.php. The manipulation of the argument usertype leads to cross site scripting. The attack may be initiated remotely. The</description></item><item><title>CVE-2024-5372: A vulnerability classified as problematic was found in Kashipara College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-5372.html</link><guid>https://patchthecve.com/cve/CVE-2024-5372.html</guid><pubDate>Wed, 17 Jun 2026 08:15:48 +0000</pubDate><description>LOW 3.5: A vulnerability classified as problematic was found in Kashipara College Management System 1.0. This vulnerability affects unknown code of the file submit_extracurricular_activity.php. The manipulation of the argument activity_contact leads to cross site scripting. The attack can be initiated remote</description></item><item><title>CVE-2024-5371: A vulnerability classified as problematic has been found in Kashipara College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-5371.html</link><guid>https://patchthecve.com/cve/CVE-2024-5371.html</guid><pubDate>Wed, 17 Jun 2026 08:15:48 +0000</pubDate><description>LOW 3.5: A vulnerability classified as problematic has been found in Kashipara College Management System 1.0. This affects an unknown part of the file submit_enroll_student.php. The manipulation of the argument class_name leads to cross site scripting. It is possible to initiate the attack remotely. The expl</description></item><item><title>CVE-2024-5370: A vulnerability was found in Kashipara College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-5370.html</link><guid>https://patchthecve.com/cve/CVE-2024-5370.html</guid><pubDate>Wed, 17 Jun 2026 08:15:48 +0000</pubDate><description>LOW 3.5: A vulnerability was found in Kashipara College Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file submit_enroll_staff.php. The manipulation of the argument class_name leads to cross site scripting. The attack may be launched remo</description></item><item><title>CVE-2024-5369: A vulnerability was found in Kashipara College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-5369.html</link><guid>https://patchthecve.com/cve/CVE-2024-5369.html</guid><pubDate>Wed, 17 Jun 2026 08:15:48 +0000</pubDate><description>LOW 3.5: A vulnerability was found in Kashipara College Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file submit_admin.php. The manipulation of the argument admin_name leads to cross site scripting. The attack can be launched re</description></item><item><title>CVE-2024-5368: A vulnerability was found in Kashipara College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-5368.html</link><guid>https://patchthecve.com/cve/CVE-2024-5368.html</guid><pubDate>Wed, 17 Jun 2026 08:15:48 +0000</pubDate><description>LOW 3.5: A vulnerability was found in Kashipara College Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file delete_faculty.php. The manipulation of the argument id leads to cross site scripting. It is possible to launch the attack remotely. The exploit ha</description></item><item><title>CVE-2024-5367: A vulnerability was found in Kashipara College Management System 1.0 and classified as problematic</title><link>https://patchthecve.com/cve/CVE-2024-5367.html</link><guid>https://patchthecve.com/cve/CVE-2024-5367.html</guid><pubDate>Wed, 17 Jun 2026 08:15:47 +0000</pubDate><description>LOW 3.5: A vulnerability was found in Kashipara College Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file each_extracurricula_activities.php. The manipulation of the argument id leads to cross site scripting. The attack may be initiated remotely. The </description></item><item><title>CVE-2024-4808: A vulnerability, which was classified as critical, was found in Kashipara College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-4808.html</link><guid>https://patchthecve.com/cve/CVE-2024-4808.html</guid><pubDate>Wed, 17 Jun 2026 08:02:58 +0000</pubDate><description>MEDIUM 6.3: A vulnerability, which was classified as critical, was found in Kashipara College Management System 1.0. Affected is an unknown function of the file delete_faculty.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disc</description></item><item><title>CVE-2024-4807: A vulnerability, which was classified as critical, has been found in Kashipara College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-4807.html</link><guid>https://patchthecve.com/cve/CVE-2024-4807.html</guid><pubDate>Wed, 17 Jun 2026 08:02:58 +0000</pubDate><description>MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in Kashipara College Management System 1.0. This issue affects some unknown processing of the file delete_user.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been</description></item><item><title>CVE-2024-4806: A vulnerability classified as critical was found in Kashipara College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-4806.html</link><guid>https://patchthecve.com/cve/CVE-2024-4806.html</guid><pubDate>Wed, 17 Jun 2026 08:02:58 +0000</pubDate><description>MEDIUM 6.3: A vulnerability classified as critical was found in Kashipara College Management System 1.0. This vulnerability affects unknown code of the file each_extracurricula_activities.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been </description></item><item><title>CVE-2024-4805: A vulnerability classified as critical has been found in Kashipara College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-4805.html</link><guid>https://patchthecve.com/cve/CVE-2024-4805.html</guid><pubDate>Wed, 17 Jun 2026 08:02:57 +0000</pubDate><description>MEDIUM 6.3: A vulnerability classified as critical has been found in Kashipara College Management System 1.0. This affects an unknown part of the file edit_faculty.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to t</description></item><item><title>CVE-2024-4804: A vulnerability was found in Kashipara College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-4804.html</link><guid>https://patchthecve.com/cve/CVE-2024-4804.html</guid><pubDate>Wed, 17 Jun 2026 08:02:57 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in Kashipara College Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file edit_user.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been d</description></item><item><title>CVE-2024-4803: A vulnerability was found in Kashipara College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-4803.html</link><guid>https://patchthecve.com/cve/CVE-2024-4803.html</guid><pubDate>Wed, 17 Jun 2026 08:02:57 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in Kashipara College Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file submit_admin.php. The manipulation of the argument phone leads to sql injection. The attack can be launched remotely. The exp</description></item><item><title>CVE-2024-4802: A vulnerability was found in Kashipara College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-4802.html</link><guid>https://patchthecve.com/cve/CVE-2024-4802.html</guid><pubDate>Wed, 17 Jun 2026 08:02:57 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in Kashipara College Management System 1.0. It has been classified as critical. Affected is an unknown function of the file submit_extracurricular_activity.php. The manipulation of the argument activity_datetime leads to sql injection. It is possible to launch the attack re</description></item><item><title>CVE-2024-4801: A vulnerability was found in Kashipara College Management System 1.0 and classified as critical</title><link>https://patchthecve.com/cve/CVE-2024-4801.html</link><guid>https://patchthecve.com/cve/CVE-2024-4801.html</guid><pubDate>Wed, 17 Jun 2026 08:02:57 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in Kashipara College Management System 1.0 and classified as critical. This issue affects some unknown processing of the file submit_new_faculty.php. The manipulation of the argument address leads to sql injection. The attack may be initiated remotely. The exploit has been </description></item><item><title>CVE-2024-4800: A vulnerability has been found in Kashipara College Management System 1.0 and classified as critical</title><link>https://patchthecve.com/cve/CVE-2024-4800.html</link><guid>https://patchthecve.com/cve/CVE-2024-4800.html</guid><pubDate>Wed, 17 Jun 2026 08:02:57 +0000</pubDate><description>MEDIUM 6.3: A vulnerability has been found in Kashipara College Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file submit_student.php. The manipulation of the argument date_of_birth leads to sql injection. The attack can be initiated remotely. The exploit has b</description></item><item><title>CVE-2024-4799: A vulnerability, which was classified as critical, was found in Kashipara College Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-4799.html</link><guid>https://patchthecve.com/cve/CVE-2024-4799.html</guid><pubDate>Wed, 17 Jun 2026 08:02:57 +0000</pubDate><description>MEDIUM 6.3: A vulnerability, which was classified as critical, was found in Kashipara College Management System 1.0. This affects an unknown part of the file view_each_faculty.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been di</description></item></channel></rss>