CVE Intelligence

Vulnerabilidades do Oretnom23 Alumni Management System

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Oretnom23 Alumni Management System: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:oretnom23:alumni_management_system

CVE-2025-13468 Alta · 8.1 CWE-862 20/11/2025
SourceCodester Alumni Management System Delete admin_class.php delete_event authorization
A weakness has been identified in SourceCodester Alumni Management System 1.0. This issue affects the function delete_forum/delete_career/delete_comment/delete_gallery/delete_event of the file admin/admin_class.php of the component Delete Handler. Executing manipulation of the argument ID can lead to missing authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.
CVE-2025-13059 Crítica · 9.8 CWE-89 12/11/2025
SourceCodester Alumni Management System manage_career.php sql injection
A weakness has been identified in SourceCodester Alumni Management System 1.0. The impacted element is an unknown function of the file /manage_career.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.