3 matches found
CVE-2025-11064: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Impacted is an unknown function of the file /admin/teachers.php. The manipulation of the argument department results in sql injection. It is possible to launch the attack remotely. The exploit has been release...
CVE-2024-50836: Improper Neutralization of Input During Web Page Generation
A Stored Cross-Site Scripting XSS vulnerability was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the firstname and lastname parameters...
CVE-2024-50834: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname and lastname parameters...