Projectsandprograms School Management System vulnerabilities

CVE-2025-11661 [CRITICAL] CWE-287 CVE-2025-11661: A vulnerability was found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d A vulnerability was found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This affects an unknown part. Performing manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This product adopts a rolling relea

CVE-2025-11657 [CRITICAL] CWE-284 CVE-2025-11657: A security vulnerability has been detected in ProjectsAndPrograms School Management System up to 6b6 A security vulnerability has been detected in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This impacts an unknown function of the file /assets/createNotice.php. The manipulation of the argument File leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed pu

CVE-2025-11658 [CRITICAL] CWE-284 CVE-2025-11658: A vulnerability was detected in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c A vulnerability was detected in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected is an unknown function of the file /assets/changeSllyabus.php. The manipulation of the argument File results in unrestricted upload. The attack may be launched remotely. The exploit is now public and may be used. Th

CVE-2025-11656 [CRITICAL] CWE-284 CVE-2025-11656: A weakness has been identified in ProjectsAndPrograms School Management System up to 6b6fae5426044f8 A weakness has been identified in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This affects an unknown function of the file /assets/editNotes.php. Executing manipulation of the argument File can lead to unrestricted upload. The attack can be launched remotely. The exploit has been made available to t

CVE-2025-11660 [CRITICAL] CWE-284 CVE-2025-11660: A vulnerability has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f8 A vulnerability has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected by this issue is some unknown functionality of the file /assets/uploadSllyabus.php. Such manipulation of the argument File leads to unrestricted upload. The attack can be executed remotely. The exploit has been di

CVE-2025-11659 [CRITICAL] CWE-284 CVE-2025-11659: A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd1 A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected by this vulnerability is an unknown functionality of the file /assets/uploadNotes.php. This manipulation of the argument File causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been

CVE-2025-11056 [CRITICAL] CWE-74 CVE-2025-11056: A flaw has been found in ProjectsAndPrograms School Management System 1.0. Affected by this vulnerab A flaw has been found in ProjectsAndPrograms School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file owner_panel/fetch-data/select-students.php. This manipulation of the argument select causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.

CVE-2026-6595 [HIGH] CWE-74 CVE-2026-6595: A vulnerability was identified in ProjectsAndPrograms School Management System up to 6b6fae5426044f8 A vulnerability was identified in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This vulnerability affects unknown code of the file buslocation.php of the component HTTP GET Parameter Handler. The manipulation of the argument bus_id leads to sql injection. It is possible to initiate the attack remotely. The

CVE-2026-5472 [MEDIUM] CWE-284 CVE-2026-5472: A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd1 A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. The affected element is an unknown function of the file /admin_panel/settings.php of the component Profile Picture Handler. This manipulation of the argument File causes unrestricted upload. Remote exploitation of the attack is possibl