82 matches found
CVE-2026-7545: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in SourceCodester Advanced School Management System 1.0. The affected element is an unknown function of the file commonController.php of the component checkEmail Endpoint. This manipulation causes sql injection. Remote exploitation of the attack is possible. The...
EUVD-2022-53543
Malicious code in bioql PyPI...
EUVD-2022-35505
Malicious code in bioql PyPI...
EUVD-2022-53549
Malicious code in bioql PyPI...
EUVD-2022-53540
Malicious code in bioql PyPI...
EUVD-2022-53541
Malicious code in bioql PyPI...
EUVD-2022-53542
Malicious code in bioql PyPI...
EUVD-2022-53545
Malicious code in bioql PyPI...
EUVD-2022-53552
Malicious code in bioql PyPI...
EUVD-2022-53548
Malicious code in bioql PyPI...
EUVD-2022-53550
Malicious code in bioql PyPI...
EUVD-2022-53544
Malicious code in bioql PyPI...
EUVD-2022-37540
Malicious code in bioql PyPI...
CVE-2025-9690: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in SourceCodester Advanced School Management System 1.0. This affects an unknown function of the file /index.php/stock/vendordetails. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be us...
CVE-2025-9689: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/stock/itemselect. The manipulation of the argument q results in sql injection. It is possible to launch the attack remotely. The exploit is now...
CVE-2025-9306: Improper Neutralization of Input During Web Page Generation
A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/notice/addNotice. The manipulation of the argument noticeSubject results in cross site scripting. It is possible to launch the attack remotely...
CVE-2022-32377
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getexamtimetable.php?id=...
CVE-2022-32379
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getparentsprofile.php?myindex=...
CVE-2022-34594
Advanced School Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component ip/school/moudel/updatesubject.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit Subject text...