Oranbyte develops a school management system that concentrates its vulnerability exposure in web-application layer weaknesses including improper access control, unrestricted file uploads, authentication flaws, cross-site scripting, and injection attacks. The vendor's disclosed vulnerabilities skew strongly toward critical-severity outcomes, reflecting the sensitivity of educational data and the attack surface presented by a multi-user administrative application. Current exploitation activity and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Oranbyte over time
Signals from CVEs in this vendor scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-11660CRITICAL A vulnerability has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected by this issue is some unknown functionality | Oct 13, 2025 | 9.8 | 34 | NO | NO |
CVE-2025-11656CRITICAL A weakness has been identified in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This affects an unknown function of the file /assets/ | Oct 13, 2025 | 9.8 | 34 | NO | NO |
CVE-2025-11661CRITICAL A vulnerability was found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This affects an unknown part. Performing manipulation resu | Oct 13, 2025 | 9.8 | 32 | NO | NO |
CVE-2025-11659CRITICAL A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected by this vulnerability is an unknown functionality of | Oct 13, 2025 | 9.8 | 32 | NO | NO |
CVE-2025-11657CRITICAL A security vulnerability has been detected in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This impacts an unknown function of the f | Oct 13, 2025 | 9.8 | 32 | NO | NO |
CVE-2025-11658CRITICAL A vulnerability was detected in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected is an unknown function of the file /assets/cha | Oct 13, 2025 | 9.8 | 31 | NO | NO |
CVE-2025-11056CRITICAL A flaw has been found in ProjectsAndPrograms School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file owner_panel/fetch-data/select-stud | Sep 27, 2025 | 9.8 | 30 | NO | NO |
CVE-2025-51967MEDIUM A Reflected Cross-site Scripting (XSS) vulnerability exists in the themeSet.php file of ProjectsAndPrograms School Management System 1.0. The application fails to sanitize user-sup | Aug 28, 2025 | 6.1 | 21 | NO | NO |
Signals from CVEs in this vendor scope (8 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Oranbyte.
Media articles that mention a CVE ID that affects a product developed by Oranbyte — matched by CVE ID, not by vendor name.