The College Management System Project maintains an educational management platform that, despite its narrow product scope, appears in institutional deployments and represents a moderately concentrated attack surface. Vulnerabilities affecting this vendor skew strongly toward critical-severity outcomes and frequently acquire public exploit code; the exposure recurs through application-layer weakness classes including SQL injection, cross-site request forgery, and insufficient input handling that are characteristic of web-facing educational software. Defenders managing institutional deployments of this platform should treat disclosed flaws as high-priority; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by College Management System Project over time
Signals from CVEs in this vendor scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-28079HIGH College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter. | May 5, 2022 | 8.8 | 62 | NO | YES |
CVE-2022-32420HIGH College Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /College/admin/teacher.php. This vulnerability is exploited via a crafted P | Jul 1, 2022 | 8.8 | 37 | NO | NO |
CVE-2022-39180CRITICAL
College Management System v1.0 - SQL Injection (SQLi).
By inserting SQL commands to the username and password fields in the login.php page
| Nov 17, 2022 | 9.8 | 30 | NO | NO |
CVE-2020-25409CRITICAL Projectsworlds College Management System Php 1.0 is vulnerable to SQL injection issues over multiple parameters. | May 24, 2021 | 9.8 | 28 | NO | NO |
CVE-2020-26051CRITICAL College Management System Php 1.0 suffers from SQL injection vulnerabilities in the index.php page from POST parameters 'unametxt' and 'pwdtxt', which are not filtered before passi | Feb 8, 2021 | 9.8 | 28 | NO | NO |
CVE-2024-7681CRITICAL A vulnerability was found in code-projects College Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the com | Aug 12, 2024 | 9.8 | 26 | NO | NO |
CVE-2022-39179HIGH
College Management System v1.0 - Authenticated remote code execution.
An admin user (the authentication can be bypassed using SQL Injection that mentioned in my other report) can | Nov 17, 2022 | 7.2 | 24 | NO | NO |
CVE-2022-30404HIGH College Management System v1.0 is vulnerable to SQL Injection via /College_Management_System/admin/display-teacher.php?teacher_id=. | May 13, 2022 | 7.2 | 22 | NO | NO |
CVE-2020-25408MEDIUM A Cross-Site Request Forgery (CSRF) vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of | May 24, 2021 | 6.5 | 21 | NO | NO |
Signals from CVEs in this vendor scope (9 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by College Management System Project.
Media articles that mention a CVE ID that affects a product developed by College Management System Project — matched by CVE ID, not by vendor name.