CVE-2024-10737: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Codezips Free Exam Hall Seating Management System 1.0. Affected is an unknown function of the file /teacher.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

CVE-2024-51063

Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter...

CVE-2024-51063

Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter...

CVE-2024-51063

The Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection within the add-teacher.php file. The vulnerability can be triggered through the mobile number or email parameters. While the specific technical root cause is not detailed beyond the injection point, the impact is...

CVE-2024-51063: Improper Neutralization of Special Elements used in an SQL Command

Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter...

PT-2024-34509

Name of the Vulnerable Software and Affected Versions: Phpgurukul Teachers Record Management System version 2.1 Description: The issue concerns a SQL Injection vulnerability in the add-teacher.php file, specifically via the mobile number or email parameter. This allows for potential exploitation...

CVE-2024-51063

Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter...

CVE-2024-6276

CVE-2024-6276 affects lahirudanushka School Management System 1.0.0/1.0.1, specifically the Teacher Page’s file component teacher.php. The vulnerability arises from improper handling of the update argument, enabling a SQL injection. The issue is exploitable remotely and has been disclosed publicl...

CVE-2024-6276: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in lahirudanushka School Management System 1.0.0/1.0.1. This issue affects some unknown processing of the file teacher.php of the component Teacher Page. The manipulation of the argument update leads to sql injection. The attack ma...

PT-2024-15483 · Unknown · Sourcecodester Engineers Online Portal

Name of the Vulnerable Software and Affected Versions: SourceCodester Engineers Online Portal version 1.0 Description: A vulnerability was found in the processing of the file signup teacher.php, where the manipulation of the argument Password leads to weak password requirements. The attack may be...

PT-2022-21313

Name of the Vulnerable Software and Affected Versions College Management System version 1.0 Description The College Management System contains a remote code execution RCE issue that can be exploited via a crafted PHP file. The vulnerability is specifically found in the /College/admin/teacher.php...

CVE-2022-32420: Undefined Security Weakness

College Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via /College/admin/teacher.php. This vulnerability is exploited via a crafted PHP file...

PT-2022-21319

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue allows for arbitrary code execution via the "ip/school/view/all teacher.php" API endpoint. Recommendations For itsourcecode Advanced School Management System...

PT-2022-21270

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue concerns SQL Injection vulnerability. It can be exploited via the /school/model/get teacher.php endpoint, specifically through the id parameter. Recommendations F...

PT-2022-20100

Name of the Vulnerable Software and Affected Versions College Management System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /College Management System/admin/display-teacher.php?teacher id= endpoint. The teacher id parameter is vulnerable to this...

CVE-2022-30404: Improper Neutralization of Special Elements used in an SQL Command

College Management System v1.0 is vulnerable to SQL Injection via /CollegeManagementSystem/admin/display-teacher.php?teacherid=...

CVE-2021-26822

Teachers Record Management System 1.0 is affected by a SQL injection vulnerability in 'searchteacher' POST parameter in search-teacher.php. This vulnerability can be exploited by a remote unauthenticated attacker to leak sensitive information and perform code execution attacks...

CVE-2021-26822

Teachers Record Management System 1.0 is affected by a SQL injection vulnerability in 'searchteacher' POST parameter in search-teacher.php. This vulnerability can be exploited by a remote unauthenticated attacker to leak sensitive information and perform code execution attacks...

CVE-2021-26822

CVE-2021-26822 affects Teachers Record Management System 1.0. Affected component: search-teacher.php, vulnerable via the SQL injection-prone POST parameter searchteacher. Root cause: improper input handling leading to SQL injection that can leak data and enable code execution as described in mult...

PT-2021-17148 · Unknown · Teachers Record Management System

Name of the Vulnerable Software and Affected Versions: Teachers Record Management System version 1.0 Description: The issue concerns a SQL injection vulnerability in the searchteacher POST parameter within the search-teacher.php file. This can be exploited by a remote unauthenticated attacker to...