Lucene search
China National Vulnerability DatabaseCNVD-2024-20433HistoryApr 12, 2024 - 12:00 a.m.
Student Management System units_view.php File Cross-Site Scripting Vulnerability
2024-04-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
student management system
web-based
software
vulnerability
filtering
escaping
user-supplied data
firstrecord parameter
units_view.php
arbitrary web script
html
payload
exploit
Student Management System is a simple web-based student management software. A cross-site scripting vulnerability exists in Student Management System version 1.0, which stems from the lack of effective filtering and escaping of user-supplied data in the FirstRecord parameter of the units_view.php file, and can be exploited to execute arbitrary Web script or HTML by injecting a carefully crafted payload.
| CPE | Name | Operator | Version |
|---|---|---|---|
| student management system student management system | eq | 1.0 |
