oranbyte records
8 published records for vendor oranbyte.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-284 Improper Access Control5
- CWE-287 Improper Authentication1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
24Monitor | CVE-2025-51967No exploit | A Reflected Cross-site Scripting (XSS) vulnerability exists in the themeSet.php file of ProjectsAndPrograms School Management System 1.0.oranbyte · school management system · CWE-79 | Medium6.1 | — | 0.2% | Aug 28, 2025 |
22Monitor | CVE-2025-11656No exploit | ProjectsAndPrograms School Management System editNotes.php unrestricted uploadoranbyte · school management system · CWE-284 | Medium5.5 | — | 0.6% | Oct 12, 2025 |
22Monitor | CVE-2025-11657No exploit | ProjectsAndPrograms School Management System createNotice.php unrestricted uploadoranbyte · school management system · CWE-284 | Medium5.5 | — | 0.6% | Oct 12, 2025 |
22Monitor | CVE-2025-11659No exploit | ProjectsAndPrograms School Management System uploadNotes.php unrestricted uploadoranbyte · school management system · CWE-284 | Medium5.5 | — | 0.6% | Oct 13, 2025 |
22Monitor | CVE-2025-11661No exploit | ProjectsAndPrograms School Management System missing authenticationoranbyte · school management system · CWE-287 | Medium5.5 | — | 0.5% | Oct 13, 2025 |
22Monitor | CVE-2025-11660No exploit | ProjectsAndPrograms School Management System uploadSllyabus.php unrestricted uploadoranbyte · school management system · CWE-284 | Medium5.5 | — | 0.5% | Oct 13, 2025 |
22Monitor | CVE-2025-11658No exploit | ProjectsAndPrograms School Management System changeSllyabus.php unrestricted uploadoranbyte · school management system · CWE-284 | Medium5.5 | — | 0.5% | Oct 13, 2025 |
8Monitor | CVE-2025-11056No exploit | ProjectsAndPrograms School Management System select-students.php sql injectionoranbyte · school management system · CWE-74 | Low2.1 | — | 0.4% | Sep 27, 2025 |
- CVE-2025-5196724Monitor
A Reflected Cross-site Scripting (XSS) vulnerability exists in the themeSet.php file of ProjectsAndPrograms School Management System 1.0.
MediumCVSS 6.1No exploitEPSS 0%oranbyte · school management systemAug 28, 2025
- CVE-2025-1165622Monitor
ProjectsAndPrograms School Management System editNotes.php unrestricted upload
MediumCVSS 5.5No exploitEPSS 1%oranbyte · school management systemOct 12, 2025
- CVE-2025-1165722Monitor
ProjectsAndPrograms School Management System createNotice.php unrestricted upload
MediumCVSS 5.5No exploitEPSS 1%oranbyte · school management systemOct 12, 2025
- CVE-2025-1165922Monitor
ProjectsAndPrograms School Management System uploadNotes.php unrestricted upload
MediumCVSS 5.5No exploitEPSS 1%oranbyte · school management systemOct 13, 2025
- CVE-2025-1166122Monitor
ProjectsAndPrograms School Management System missing authentication
MediumCVSS 5.5No exploitEPSS 1%oranbyte · school management systemOct 13, 2025
- CVE-2025-1166022Monitor
ProjectsAndPrograms School Management System uploadSllyabus.php unrestricted upload
MediumCVSS 5.5No exploitEPSS 0%oranbyte · school management systemOct 13, 2025
- CVE-2025-1165822Monitor
ProjectsAndPrograms School Management System changeSllyabus.php unrestricted upload
MediumCVSS 5.5No exploitEPSS 0%oranbyte · school management systemOct 13, 2025
- CVE-2025-110568Monitor
ProjectsAndPrograms School Management System select-students.php sql injection
LowCVSS 2.1No exploitEPSS 0%oranbyte · school management systemSep 27, 2025