SourceCodester Simple Student Information System vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting SourceCodester Simple Student Information System: 3 record(s), with affected versions and fixes.

CVE-2026-105809 Medium · 4.3 CWE-79 Oct 6, 2026

SourceCodester Simple Student Information System Profile Field register.php cross site scripting

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.

CVE-2026-105808 Low · 3.5 CWE-79 Oct 6, 2026

SourceCodester Simple Student Information System searchresults.php clean cross site scripting

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

CVE-2026-105807 High · 7.3 CWE-74 Oct 6, 2026

SourceCodester Simple Student Information System searchquery.php sql injection

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely.