CVE Intelligence

SourceCodester Alumni Management System vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting SourceCodester Alumni Management System: 2 record(s), with affected versions and fixes.

CVE-2025-13468 High · 8.1 CWE-862 Nov 20, 2025
SourceCodester Alumni Management System Delete admin_class.php delete_event authorization
A weakness has been identified in SourceCodester Alumni Management System 1.0. This issue affects the function delete_forum/delete_career/delete_comment/delete_gallery/delete_event of the file admin/admin_class.php of the component Delete Handler. Executing manipulation of the argument ID can lead to missing authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.
CVE-2025-13059 Critical · 9.8 CWE-89 Nov 12, 2025
SourceCodester Alumni Management System manage_career.php sql injection
A weakness has been identified in SourceCodester Alumni Management System 1.0. The impacted element is an unknown function of the file /manage_career.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.