PT-2026-86681

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /delete subject.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-15596: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /subject.php. Such manipulation of the argument subject leads to cross site scripting. It is possible to launch the attack remotely. The exploit is...

CVE-2026-3403: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in PHPGurukul Student Record Management System 1.0. This issue affects some unknown processing of the file /edit-subject.php. Performing a manipulation of the argument Subject 1 results in cross site scripting. The attack is possible to be carried out remotely. The...

CVE-2024-44639: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php...

CVE-2024-44639

PHPGurukul Student Record System version 3.2.0 is vulnerable to SQL Injection due to a lack of validation of externally-entered SQL statements. The flaw exists in the add-subject.php file specifically through the sub1, sub2, sub3, sub4, and course-short parameters. An attacker can exploit this to...

EUVD-2006-3051

Malware in sbrugna...

Student Record System add-subject.php File SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in parameter sub1 in file /add-subject.php. An attacker can exploit this vulnerability to execute...

CVE-2025-4108 PHPGurukul Student Record System add-subject.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Student Record System 3.20. Affected is an unknown function of the file /add-subject.php. The manipulation of the argument sub1 leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-4108: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul Student Record System 3.20. Affected is an unknown function of the file /add-subject.php. The manipulation of the argument sub1 leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

PT-2024-34425

Name of the Vulnerable Software and Affected Versions: kashipara E-learning Management System Project version 1.0 Description: A SQL Injection issue was found in the /admin/add subject.php endpoint via the subject code parameter. This allows for potential exploitation. Recommendations: For...

PT-2024-34427

Name of the Vulnerable Software and Affected Versions: kashipara E-learning Management System Project version 1.0 Description: A SQL Injection issue was found in the /admin/edit subject.php file, specifically via the unit parameter. This allows for potential manipulation of database queries...

PT-2024-37578

Name of the Vulnerable Software and Affected Versions lahirudanushka School Management System versions 1.0.0 through 1.0.1 Description A vulnerability was found in the lahirudanushka School Management System, affecting some unknown processing of the file /subject.php of the component Subject Page...

School-Management-System Cross-Site Scripting Vulnerability

School-Management-System is a school management system by the individual developer Lahiru Danushka. A cross-site scripting vulnerability exists in School-Management-System, which stems from a cross-site scripting vulnerability in the Sybillus parameter of the /subject.php file...

CVE-2024-6278

CVE-2024-6278 affects lahirudanushka School Management System (versions 1.0.0–1.0.1). The vulnerability exists in Subject Page’s subject.php, where manipulating the update parameter leads to SQL injection. Exploitation can be performed remotely, and the vulnerability has been publicly disclosed. ...

CVE-2024-6278: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in lahirudanushka School Management System 1.0.0/1.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file subject.php of the component Subject Page. The manipulation of the argument update leads to sql injection. The...

PT-2024-32461

Name of the Vulnerable Software and Affected Versions Campcodes Complete Web-Based School Management System version 1.0 Description A problematic issue has been found in the system, affecting an unknown function of the file /model/delete student grade subject.php. The manipulation of the index...

PT-2024-32432 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A problematic issue has been found in the system, affecting some unknown functionality of the file /model/update subject.php. The manipulation of the name argument...

PT-2024-32146

Name of the Vulnerable Software and Affected Versions Campcodes Complete Web-Based School Management System version 1.0 Description A problematic issue was found in the system, affecting an unknown functionality of the file /view/show student subject.php. The manipulation of the id argument leads...

PT-2024-25238

Name of the Vulnerable Software and Affected Versions campcodes Complete Web-Based School Management System version 1.0 Description The issue allows an attacker to execute arbitrary SQL commands via the index parameter in the /model/delete student grade subject.php API endpoint. This can...

Student Record System edit-subject.php file SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameters sub1/sub2/sub3/sub4/udate in the file /edit-subject.php. An attacker can exploit thi...