Student File Management System vulnerabilities

A vulnerability was identified in code-projects Student File Management System 1.0. It affects an unknown functionality in the file /download.php. Manipulation of the argument istore_id leads to SQL injection. The attack can be initiated remotely, and the exploit is publicly available.

A vulnerability was determined in code-projects Student File Management System 1.0. Manipulation in the file /admin/update_student.php leads to cross site scripting. The attack may be launched remotely and the exploit has been publicly disclosed.

A vulnerability was found in code-projects Student File Management System 1.0. It affects an unknown part of the file /admin/update_user.php in the Update User Page component. Manipulation leads to cross site scripting. The attack may be initiated remotely and the exploit has been made public.