Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

School Management System — Vulnerabilities & Security Advisories 31

All 31 CVE vulnerabilities found in School Management System, with AI-generated Chinese analysis, references, and POCs.

This page documents security vulnerabilities associated with the School Management System product, categorized by weakness type and specific tags. It aggregates a comprehensive collection of identified security flaws, ranging from authentication bypasses and data injection risks to authorization failures, covering incidents reported from January 2018 through the present day. Here, users can track the vendor’s advisory history to understand the timeline of disclosures and remediation efforts, analyze specific weakness classes to grasp the underlying technical causes of these failures, and look up the product’s complete vulnerability history to assess its security posture over time. By consolidating these diverse data points, the page serves as a central reference for security professionals, auditors, and administrators seeking to evaluate the risk profile of this specific educational software solution. The information presented is derived from verified public advisories and vulnerability databases, ensuring accuracy and context for each recorded entry. Understanding the breadth and severity of these issues is critical for implementing effective mitigation strategies and maintaining the integrity of school administrative operations. This resource does not endorse any particular vendor but aims to provide transparent, factual data to support informed decision-making regarding software procurement and security maintenance.

Vendor: Unknown

CVE IDTitleCVSSSeverityPublished
CVE-2026-6595 ProjectsAndPrograms School Management System HTTP GET Parameter buslocation.php sql injection CWE-89 7.3 High2026-04-20
CVE-2026-5472 ProjectsAndPrograms School Management System Profile Picture settings.php unrestricted upload CWE-434 6.3 Medium2026-04-03
CVE-2026-3261 itsourcecode School Management System Setting index.php sql injection CWE-89 7.3 High2026-02-26
CVE-2026-2190 itsourcecode School Management System controller.php sql injection CWE-89 7.3 High2026-02-08
CVE-2026-2189 itsourcecode School Management System index.php sql injection CWE-89 7.3 High2026-02-08
CVE-2026-2073 itsourcecode School Management System index.php sql injection CWE-89 7.3 High2026-02-07
CVE-2026-2018 itsourcecode School Management System controller.php sql injection CWE-89 7.3 High2026-02-06
CVE-2026-1701 itsourcecode School Management System index.php sql injection CWE-89 7.3 High2026-01-30
CVE-2026-1590 itsourcecode School Management System index.php sql injection CWE-89 7.3 High2026-01-29
CVE-2026-1589 itsourcecode School Management System index.php sql injection CWE-89 7.3 High2026-01-29
CVE-2026-1551 itsourcecode School Management System controller.php sql injection CWE-89 6.3 Medium2026-01-28
CVE-2026-1545 itsourcecode School Management System index.php sql injection CWE-89 7.3 High2026-01-28
CVE-2026-1176 itsourcecode School Management System index.php sql injection CWE-89 7.3 High2026-01-19
CVE-2026-0544 itsourcecode School Management System index.php sql injection CWE-89 7.3 High2026-01-01
CVE-2025-13795 codingWithElias School Management System Edit Student Info student-view.php cross site scripting CWE-79 2.4 Low2025-11-30
CVE-2025-11661 ProjectsAndPrograms School Management System missing authentication CWE-306 7.3 High2025-10-13
CVE-2025-11660 ProjectsAndPrograms School Management System uploadSllyabus.php unrestricted upload CWE-434 7.3 High2025-10-13
CVE-2025-11659 ProjectsAndPrograms School Management System uploadNotes.php unrestricted upload CWE-434 7.3 High2025-10-13
CVE-2025-11658 ProjectsAndPrograms School Management System changeSllyabus.php unrestricted upload CWE-434 7.3 High2025-10-13
CVE-2025-11657 ProjectsAndPrograms School Management System createNotice.php unrestricted upload CWE-434 7.3 High2025-10-13
CVE-2025-11656 ProjectsAndPrograms School Management System editNotes.php unrestricted upload CWE-434 7.3 High2025-10-13
CVE-2025-11056 ProjectsAndPrograms School Management System select-students.php sql injection CWE-89 6.3 Medium2025-09-27
CVE-2024-6374 lahirudanushka School Management System Subject Page subject.php cross site scripting CWE-79 3.5 Low2024-06-27
CVE-2024-6279 lahirudanushka School Management System Exam Results Page examresults-par.php sql injection CWE-89 6.3 Medium2024-06-24
CVE-2024-6278 lahirudanushka School Management System Subject Page subject.php sql injection CWE-89 4.7 Medium2024-06-24
CVE-2024-6277 lahirudanushka School Management System Student Page student.php sql injection CWE-89 4.7 Medium2024-06-24
CVE-2024-6276 lahirudanushka School Management System Teacher Page teacher.php sql injection CWE-89 4.7 Medium2024-06-24
CVE-2024-6275 lahirudanushka School Management System Parent Page parent.php sql injection CWE-89 4.7 Medium2024-06-24
CVE-2024-6274 lahirudanushka School Management System Attendance Report Page attendancelist.php sql injection CWE-89 4.7 Medium2024-06-24
CVE-2024-6268 lahirudanushka School Management System Login Page login.php sql injection CWE-89 7.3 High2024-06-23

All 31 known CVE vulnerabilities affecting School Management System with full Chinese analysis, references, and POCs where available.