https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-2171.htmlhttps://patchthecve.com/cve/CVE-2026-2171.htmlWed, 17 Jun 2026 10:30:27 +0000HIGH 7.3: A vulnerability was found in code-projects Online Student Management System 1.0. Affected is an unknown function of the file accounts.php of the component Login. Performing a manipulation of the argument username/password results in sql injection. The attack can be initiated remotely. The exploit hahttps://patchthecve.com/cve/CVE-2026-2156.htmlhttps://patchthecve.com/cve/CVE-2026-2156.htmlWed, 17 Jun 2026 10:30:25 +0000LOW 2.4: A weakness has been identified in code-projects Online Student Management System 1.0. The impacted element is an unknown function of the file /admin/announcement/index.php?view=add of the component Announcement Management Module. This manipulation causes cross site scripting. The attack is possible https://patchthecve.com/cve/CVE-2023-44753.htmlhttps://patchthecve.com/cve/CVE-2023-44753.htmlWed, 17 Jun 2026 06:27:45 +0000MEDIUM 6.1: A stored cross-site scripting (XSS) vulnerability fin Student Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter on the profile.php page.https://patchthecve.com/cve/CVE-2024-6801.htmlhttps://patchthecve.com/cve/CVE-2024-6801.htmlWed, 17 Jun 2026 08:18:44 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in SourceCodester Online Student Management System 1.0. This issue affects some unknown processing of the file /add-students.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotelhttps://patchthecve.com/cve/CVE-2024-3533.htmlhttps://patchthecve.com/cve/CVE-2024-3533.htmlWed, 17 Jun 2026 07:44:27 +0000LOW 3.5: A vulnerability classified as problematic was found in Campcodes Complete Online Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file academic_year_view.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack can behttps://patchthecve.com/cve/CVE-2024-3532.htmlhttps://patchthecve.com/cve/CVE-2024-3532.htmlWed, 17 Jun 2026 07:44:27 +0000LOW 3.5: A vulnerability classified as problematic has been found in Campcodes Complete Online Student Management System 1.0. Affected is an unknown function of the file attendance_view.php. The manipulation of the argument FirstRecord leads to cross site scripting. It is possible to launch the attack remotehttps://patchthecve.com/cve/CVE-2024-3531.htmlhttps://patchthecve.com/cve/CVE-2024-3531.htmlWed, 17 Jun 2026 07:44:27 +0000LOW 3.5: A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file courses_view.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack may be initiated remhttps://patchthecve.com/cve/CVE-2024-3530.htmlhttps://patchthecve.com/cve/CVE-2024-3530.htmlWed, 17 Jun 2026 07:44:27 +0000LOW 3.5: A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file Marks_view.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack can be initiated remothttps://patchthecve.com/cve/CVE-2024-3529.htmlhttps://patchthecve.com/cve/CVE-2024-3529.htmlWed, 17 Jun 2026 07:44:27 +0000LOW 3.5: A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been classified as problematic. This affects an unknown part of the file students_view.php. The manipulation of the argument FirstRecord leads to cross site scripting. It is possible to initiate the attack rhttps://patchthecve.com/cve/CVE-2024-3528.htmlhttps://patchthecve.com/cve/CVE-2024-3528.htmlWed, 17 Jun 2026 07:44:27 +0000LOW 3.5: A vulnerability was found in Campcodes Complete Online Student Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file units_view.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack may be launched