https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-4474.htmlhttps://patchthecve.com/cve/CVE-2026-4474.htmlWed, 17 Jun 2026 10:56:39 +0000LOW 2.4: A flaw has been found in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /admin_single_student_update.php. This manipulation of the argument st_name causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may behttps://patchthecve.com/cve/CVE-2026-4223.htmlhttps://patchthecve.com/cve/CVE-2026-4223.htmlWed, 17 Jun 2026 10:56:15 +0000HIGH 7.3: A vulnerability was identified in itsourcecode Payroll Management System 1.0. This issue affects some unknown processing of the file /manage_employee.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be https://patchthecve.com/cve/CVE-2026-3812.htmlhttps://patchthecve.com/cve/CVE-2026-3812.htmlWed, 17 Jun 2026 10:44:16 +0000MEDIUM 4.3: A vulnerability was determined in itsourcecode Payroll Management System 1.0. Affected is an unknown function of the file /manage_employee_allowances.php. This manipulation of the argument ID causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been publiclhttps://patchthecve.com/cve/CVE-2026-3767.htmlhttps://patchthecve.com/cve/CVE-2026-3767.htmlWed, 17 Jun 2026 10:44:10 +0000MEDIUM 6.3: A weakness has been identified in itsourcecode sanitize or validate this input 1.0. Affected is an unknown function of the file /admin/teacher-attendance.php. Executing a manipulation of the argument teacher_id can lead to sql injection. The attack may be launched remotely. The exploit has been madehttps://patchthecve.com/cve/CVE-2026-3765.htmlhttps://patchthecve.com/cve/CVE-2026-3765.htmlWed, 17 Jun 2026 10:44:10 +0000HIGH 7.3: A vulnerability was identified in itsourcecode University Management System 1.0. This affects an unknown function of the file /att_single_view.php. Such manipulation of the argument dt leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.https://patchthecve.com/cve/CVE-2026-3760.htmlhttps://patchthecve.com/cve/CVE-2026-3760.htmlWed, 17 Jun 2026 10:44:09 +0000HIGH 7.3: A vulnerability was detected in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /view_result.php. Performing a manipulation of the argument seme results in sql injection. The attack is possible to be carried out remotely. The exploit is now public ahttps://patchthecve.com/cve/CVE-2026-3747.htmlhttps://patchthecve.com/cve/CVE-2026-3747.htmlWed, 17 Jun 2026 10:44:08 +0000HIGH 7.3: A vulnerability was identified in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /add_result.php. Such manipulation of the argument subject leads to sql injection. The attack may be launched remotely. The exploit is publicly available https://patchthecve.com/cve/CVE-2026-3740.htmlhttps://patchthecve.com/cve/CVE-2026-3740.htmlWed, 17 Jun 2026 10:44:07 +0000HIGH 7.3: A weakness has been identified in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /admin_search_student.php. This manipulation of the argument admin_search_student causes sql injection. The attack is possible to be carried out remotely. The exploit has beenhttps://patchthecve.com/cve/CVE-2026-3487.htmlhttps://patchthecve.com/cve/CVE-2026-3487.htmlWed, 17 Jun 2026 10:43:39 +0000MEDIUM 4.7: A vulnerability was found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/class-result.php. Performing a manipulation of the argument course_code results in sql injection. The attack can be initiated remotely. The exploit has been made pubhttps://patchthecve.com/cve/CVE-2026-3486.htmlhttps://patchthecve.com/cve/CVE-2026-3486.htmlWed, 17 Jun 2026 10:43:39 +0000MEDIUM 4.7: A vulnerability has been found in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /admin/student-fee.php. Such manipulation of the argument roll_no leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to https://patchthecve.com/cve/CVE-2026-3413.htmlhttps://patchthecve.com/cve/CVE-2026-3413.htmlWed, 17 Jun 2026 10:43:34 +0000HIGH 7.3: A flaw has been found in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /admin_single_student.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may https://patchthecve.com/cve/CVE-2026-3412.htmlhttps://patchthecve.com/cve/CVE-2026-3412.htmlWed, 17 Jun 2026 10:43:33 +0000MEDIUM 4.3: A vulnerability was detected in itsourcecode University Management System 1.0. This affects an unknown part of the file /att_single_view.php. The manipulation of the argument dt results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used.https://patchthecve.com/cve/CVE-2026-3411.htmlhttps://patchthecve.com/cve/CVE-2026-3411.htmlWed, 17 Jun 2026 10:43:33 +0000HIGH 7.3: A security vulnerability has been detected in itsourcecode University Management System 1.0. Affected by this issue is some unknown functionality of the file /admin_single_student_update.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. Thttps://patchthecve.com/cve/CVE-2026-3410.htmlhttps://patchthecve.com/cve/CVE-2026-3410.htmlWed, 17 Jun 2026 10:43:33 +0000HIGH 7.3: A weakness has been identified in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/check_studid.php. Executing a manipulation of the argument student_id can lead to sql injection. The attack may be launched remotely. The exploihttps://patchthecve.com/cve/CVE-2026-3152.htmlhttps://patchthecve.com/cve/CVE-2026-3152.htmlWed, 17 Jun 2026 10:43:07 +0000HIGH 7.3: A flaw has been found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/teacher-salary.php. This manipulation of the argument teacher_id causes sql injection. It is possible to initiate the attack remotely. The exploit has been published andhttps://patchthecve.com/cve/CVE-2026-3151.htmlhttps://patchthecve.com/cve/CVE-2026-3151.htmlWed, 17 Jun 2026 10:43:07 +0000HIGH 7.3: A vulnerability was detected in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /login/login.php. The manipulation of the argument email results in sql injection. The attack may be performed from remote. The exploit is now public and may be used.https://patchthecve.com/cve/CVE-2026-3150.htmlhttps://patchthecve.com/cve/CVE-2026-3150.htmlWed, 17 Jun 2026 10:43:07 +0000MEDIUM 6.3: A security vulnerability has been detected in itsourcecode College Management System 1.0. This affects an unknown part of the file /admin/display-teacher.php. The manipulation of the argument teacher_id leads to sql injection. The attack is possible to be carried out remotely. The exploit has been dhttps://patchthecve.com/cve/CVE-2026-3149.htmlhttps://patchthecve.com/cve/CVE-2026-3149.htmlWed, 17 Jun 2026 10:43:07 +0000MEDIUM 6.3: A weakness has been identified in itsourcecode College Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/asign-single-student-subjects.php. Executing a manipulation of the argument course_code can lead to sql injection. The attack can be executed remotelyhttps://patchthecve.com/cve/CVE-2026-2117.htmlhttps://patchthecve.com/cve/CVE-2026-2117.htmlWed, 17 Jun 2026 10:30:21 +0000HIGH 7.3: A vulnerability was found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/edit_activity.php. Performing a manipulation of the argument activity_id results in sql injection. The attack can be initiated remotely. The exploit has been made phttps://patchthecve.com/cve/CVE-2026-2116.htmlhttps://patchthecve.com/cve/CVE-2026-2116.htmlWed, 17 Jun 2026 10:30:20 +0000HIGH 7.3: A vulnerability has been found in itsourcecode Society Management System 1.0. Impacted is an unknown function of the file /admin/edit_expenses.php. Such manipulation of the argument expenses_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to thhttps://patchthecve.com/cve/CVE-2026-2115.htmlhttps://patchthecve.com/cve/CVE-2026-2115.htmlWed, 17 Jun 2026 10:30:20 +0000HIGH 7.3: A flaw has been found in itsourcecode Society Management System 1.0. This issue affects some unknown processing of the file /admin/delete_expenses.php. This manipulation of the argument expenses_id causes sql injection. It is possible to initiate the attack remotely. The exploit has been published ahttps://patchthecve.com/cve/CVE-2026-2114.htmlhttps://patchthecve.com/cve/CVE-2026-2114.htmlWed, 17 Jun 2026 10:30:20 +0000HIGH 7.3: A vulnerability was detected in itsourcecode Society Management System 1.0. This vulnerability affects unknown code of the file /admin/edit_admin.php. The manipulation of the argument admin_id results in sql injection. The attack may be performed from remote. The exploit is now public and may be usehttps://patchthecve.com/cve/CVE-2026-1595.htmlhttps://patchthecve.com/cve/CVE-2026-1595.htmlWed, 17 Jun 2026 10:16:08 +0000HIGH 7.3: A vulnerability was detected in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/edit_student_query.php. The manipulation of the argument student_id results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.https://patchthecve.com/cve/CVE-2026-1594.htmlhttps://patchthecve.com/cve/CVE-2026-1594.htmlWed, 17 Jun 2026 10:16:07 +0000HIGH 7.3: A security vulnerability has been detected in itsourcecode Society Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/add_expenses.php. The manipulation of the argument detail leads to sql injection. Remote exploitation of the attack is possible. The explohttps://patchthecve.com/cve/CVE-2026-1593.htmlhttps://patchthecve.com/cve/CVE-2026-1593.htmlWed, 17 Jun 2026 10:16:07 +0000HIGH 7.3: A weakness has been identified in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit_expenses_query.php. Executing a manipulation of the argument detail can lead to sql injection. The attack may be launched remotely. The exphttps://patchthecve.com/cve/CVE-2026-1590.htmlhttps://patchthecve.com/cve/CVE-2026-1590.htmlWed, 17 Jun 2026 10:16:07 +0000HIGH 7.3: A vulnerability was identified in itsourcecode School Management System 1.0. This impacts an unknown function of the file /ramonsys/faculty/index.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be usedhttps://patchthecve.com/cve/CVE-2026-1589.htmlhttps://patchthecve.com/cve/CVE-2026-1589.htmlWed, 17 Jun 2026 10:16:07 +0000HIGH 7.3: A vulnerability was determined in itsourcecode School Management System 1.0. This affects an unknown function of the file /ramonsys/inquiry/index.php. This manipulation of the argument txtsearch causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and mhttps://patchthecve.com/cve/CVE-2026-1551.htmlhttps://patchthecve.com/cve/CVE-2026-1551.htmlWed, 17 Jun 2026 10:16:03 +0000MEDIUM 6.3: A weakness has been identified in itsourcecode School Management System 1.0. This affects an unknown part of the file /ramonsys/course/controller.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been made available to thhttps://patchthecve.com/cve/CVE-2026-1545.htmlhttps://patchthecve.com/cve/CVE-2026-1545.htmlWed, 17 Jun 2026 10:16:02 +0000HIGH 7.3: A weakness has been identified in itsourcecode School Management System 1.0. The affected element is an unknown function of the file /course/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made available https://patchthecve.com/cve/CVE-2026-1135.htmlhttps://patchthecve.com/cve/CVE-2026-1135.htmlWed, 17 Jun 2026 10:15:11 +0000MEDIUM 4.3: A security flaw has been discovered in itsourcecode Society Management System 1.0. This impacts an unknown function of the file /admin/activity.php. The manipulation of the argument Title results in cross site scripting. The attack may be launched remotely. The exploit has been released to the publihttps://patchthecve.com/cve/CVE-2026-1134.htmlhttps://patchthecve.com/cve/CVE-2026-1134.htmlWed, 17 Jun 2026 10:15:10 +0000MEDIUM 4.3: A vulnerability was identified in itsourcecode Society Management System 1.0. This affects an unknown function of the file /admin/expenses.php. The manipulation of the argument detail leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be https://patchthecve.com/cve/CVE-2026-1119.htmlhttps://patchthecve.com/cve/CVE-2026-1119.htmlWed, 17 Jun 2026 10:15:07 +0000HIGH 7.3: A flaw has been found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/delete_activity.php. Executing a manipulation of the argument activity_id can lead to sql injection. It is possible to launch the attack remotely. The exploit has been https://patchthecve.com/cve/CVE-2026-1118.htmlhttps://patchthecve.com/cve/CVE-2026-1118.htmlWed, 17 Jun 2026 10:15:07 +0000MEDIUM 6.3: A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is an unknown function of the file /admin/add_activity.php. Performing a manipulation of the argument Title results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and mayhttps://patchthecve.com/cve/CVE-2026-0582.htmlhttps://patchthecve.com/cve/CVE-2026-0582.htmlWed, 17 Jun 2026 10:10:59 +0000MEDIUM 6.3: A vulnerability was identified in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/edit_activity_query.php. The manipulation of the argument Title leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be uhttps://patchthecve.com/cve/CVE-2025-15354.htmlhttps://patchthecve.com/cve/CVE-2025-15354.htmlWed, 17 Jun 2026 08:37:36 +0000HIGH 7.3: A flaw has been found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/add_admin.php. Executing manipulation of the argument Username can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published ahttps://patchthecve.com/cve/CVE-2025-15353.htmlhttps://patchthecve.com/cve/CVE-2025-15353.htmlWed, 17 Jun 2026 08:37:36 +0000HIGH 7.3: A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is the function edit_admin_query of the file /admin/edit_admin_query.php. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is nowhttps://patchthecve.com/cve/CVE-2025-15168.htmlhttps://patchthecve.com/cve/CVE-2025-15168.htmlWed, 07 Oct 2026 12:10:00 +0000HIGH 7.3: A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.https://patchthecve.com/cve/CVE-2025-15078.htmlhttps://patchthecve.com/cve/CVE-2025-15078.htmlWed, 07 Oct 2026 13:10:00 +0000HIGH 7.3: A vulnerability was detected in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /list_report.php. The manipulation of the argument sy results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.https://patchthecve.com/cve/CVE-2025-15077.htmlhttps://patchthecve.com/cve/CVE-2025-15077.htmlWed, 07 Oct 2026 13:10:00 +0000HIGH 7.3: A security vulnerability has been detected in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /form137.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly anhttps://patchthecve.com/cve/CVE-2025-15075.htmlhttps://patchthecve.com/cve/CVE-2025-15075.htmlWed, 07 Oct 2026 13:10:00 +0000HIGH 7.3: A security flaw has been discovered in itsourcecode Student Management System 1.0. This issue affects some unknown processing of the file /student_p.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the puhttps://patchthecve.com/cve/CVE-2025-15034.htmlhttps://patchthecve.com/cve/CVE-2025-15034.htmlMon, 19 Oct 2026 22:10:00 +0000HIGH 7.3: A security flaw has been discovered in itsourcecode Student Management System 1.0. This affects an unknown part of the file /record.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploitedhttps://patchthecve.com/cve/CVE-2025-14967.htmlhttps://patchthecve.com/cve/CVE-2025-14967.htmlWed, 17 Jun 2026 08:36:51 +0000HIGH 7.3: A vulnerability was identified in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /candidates_report.php. The manipulation of the argument school_year leads to sql injection. The attack can be initiated remotely. The exploit is publihttps://patchthecve.com/cve/CVE-2025-67285.htmlhttps://patchthecve.com/cve/CVE-2025-67285.htmlTue, 13 Oct 2026 11:10:00 +0000HIGH 7.3: A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of ITSourcecode COVID Tracking System Using QR-Code v1.0. The reason for this issue is that attackers inject malicious code from the parameter 'id' and use it directly in SQL queries without the need for appropriate cleaninghttps://patchthecve.com/cve/CVE-2025-14667.htmlhttps://patchthecve.com/cve/CVE-2025-14667.htmlMon, 28 Sep 2026 10:10:00 +0000HIGH 7.3: A security vulnerability has been detected in itsourcecode COVID Tracking System 1.0. The impacted element is an unknown function of the file /admin/?page=system_info. Such manipulation of the argument meta_value leads to sql injection. The attack may be performed from remote. The exploit has been dhttps://patchthecve.com/cve/CVE-2025-14666.htmlhttps://patchthecve.com/cve/CVE-2025-14666.htmlMon, 28 Sep 2026 10:10:00 +0000HIGH 7.3: A weakness has been identified in itsourcecode COVID Tracking System 1.0. The affected element is an unknown function of the file /admin/?page=user. This manipulation of the argument Username causes sql injection. The attack is possible to be carried out remotely. The exploit has been made availablehttps://patchthecve.com/cve/CVE-2025-14661.htmlhttps://patchthecve.com/cve/CVE-2025-14661.htmlWed, 07 Oct 2026 19:10:00 +0000HIGH 7.3: A vulnerability has been found in itsourcecode Student Managemen System 1.0. Affected by this issue is some unknown functionality of the file /advisers.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public https://patchthecve.com/cve/CVE-2025-14653.htmlhttps://patchthecve.com/cve/CVE-2025-14653.htmlWed, 07 Oct 2026 19:10:00 +0000HIGH 7.3: A vulnerability was determined in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /addrecord.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilihttps://patchthecve.com/cve/CVE-2025-14644.htmlhttps://patchthecve.com/cve/CVE-2025-14644.htmlWed, 07 Oct 2026 19:10:00 +0000HIGH 7.3: A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /update_subject.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosedhttps://patchthecve.com/cve/CVE-2025-14639.htmlhttps://patchthecve.com/cve/CVE-2025-14639.htmlWed, 07 Oct 2026 19:10:00 +0000HIGH 7.3: A vulnerability was detected in itsourcecode Student Management System 1.0. Impacted is an unknown function of the file /uprec.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used.https://patchthecve.com/cve/CVE-2025-14588.htmlhttps://patchthecve.com/cve/CVE-2025-14588.htmlWed, 07 Oct 2026 19:10:00 +0000HIGH 7.3: A security flaw has been discovered in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /update_program.php. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been rel