<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: online enrollment management system project</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2021-40579: https://www.sourcecodester.com/ Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 is </title><link>https://patchthecve.com/cve/CVE-2021-40579.html</link><guid>https://patchthecve.com/cve/CVE-2021-40579.html</guid><pubDate>Wed, 17 Jun 2026 04:07:09 +0000</pubDate><description>MEDIUM 6.5: https://www.sourcecodester.com/ Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 is affected by: Incorrect Access Control. The impact is: gain privileges (remote).</description></item><item><title>CVE-2021-44599: The id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to SQL injection</title><link>https://patchthecve.com/cve/CVE-2021-44599.html</link><guid>https://patchthecve.com/cve/CVE-2021-44599.html</guid><pubDate>Wed, 17 Jun 2026 04:12:35 +0000</pubDate><description>HIGH 7.5: The id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to SQL injection attacks. A crafted payload injects a SQL sub-query that calls MySQL&#x27;s load_file function with a UNC file path that references a URL on an external domain. The application interacted with th</description></item><item><title>CVE-2021-40577: A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Enrollment Management System</title><link>https://patchthecve.com/cve/CVE-2021-40577.html</link><guid>https://patchthecve.com/cve/CVE-2021-40577.html</guid><pubDate>Wed, 17 Jun 2026 04:07:09 +0000</pubDate><description>MEDIUM 5.4: A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 in the Add-Users page via the Name parameter.</description></item></channel></rss>