9 matches found
CVE-2025-14646: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in code-projects Student File Management System 1.0. This impacts an unknown function of the file /admin/deletestudent.php. The manipulation of the argument studid results in sql injection. The attack may be performed from remote. The exploit has been released ...
CVE-2025-10594: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in SourceCodester Online Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deletestudent.php. Executing manipulation of the argument studid can lead to sql injection. It is possible to launch the attack remotely...
CVE-2025-9666: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in code-projects Simple Grading System 1.0. Affected by this issue is some unknown functionality of the file /deletestudent.php of the component Admin Panel. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely...
PT-2025-35300
Name of the Vulnerable Software and Affected Versions: code-projects Simple Grading System version 1.0 Description: A security vulnerability has been detected in the Admin Panel component of code-projects Simple Grading System. Manipulation of the ID argument in the /delete student.php file leads...
CVE-2025-8494: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in code-projects Intern Membership Management System 1.0. This issue affects some unknown processing of the file /admin/deletestudent.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated...
CVE-2024-54930
Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/deletestudent.php...
CVE-2024-54930
Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in the /admin/delete_student.php endpoint. This vulnerability allows for potential exploitation of the underlying database. As a temporary workaround, it is recommended to restrict access to the affected endpoint and avoid...
CVE-2024-54930: Improper Neutralization of Special Elements used in an SQL Command
Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/deletestudent.php...