88 matches found
CVE-2022-32372
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getsubject.php?id=...
CVE-2022-32376
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getevents.php?eventid=...
CVE-2022-32374
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getsubjectrouting.php?id=...
CVE-2022-32373
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getexam.php?id=...
CVE-2022-34580
Advanced School Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the address parameter at ip/school/index.php...
CVE-2022-34580
CVE-2022-34580 affects Advanced School Management System v1.0. The issue is a cross-site scripting (XSS) vulnerability exploitable via the address parameter at ip/school/index.php. Documented CVSS: 4.8 (MEDIUM) with network attack vector, high privileges required and user interaction. APT/Exploit...
PT-2022-22219 · Unknown · Advanced School Management System
Name of the Vulnerable Software and Affected Versions: Advanced School Management System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited via the address parameter at the "ip/school/index.php" endpoint. Recommendations:...
CVE-2022-34594
CVE-2022-34594 affects Advanced School Management System v1.0. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the component ip/school/moudel/update_subject.php, where a crafted payload in the Edit Subject field can cause arbitrary web scripts/HTML to execute. The NVD entry...
CVE-2022-34594
Advanced School Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component ip/school/moudel/updatesubject.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit Subject text...
CVE-2022-34586
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via the grade parameter at /school/view/studentgradewise.php...
Sql injection
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via the grade parameter at /school/view/timetableinsertform.php...
Sql injection
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via the grade parameter at /school/view/studentgradewise.php...
CVE-2022-34586
CVE-2022-34586 affects itsourcecode Advanced School Management System v1.0, with a SQL Injection vulnerability exploitable via the grade parameter in /school/view/student_grade_wise.php. The entry is corroborated by multiple connected records indicating an SQL injection issue; the CVSS 3.1 base s...
Advanced School Management System SQL注入漏洞
Advanced School Management System is a school management system by Angel Jude Reyes Suarez, an individual developer. A security vulnerability exists in version 1.0 of Advanced School Management System, which originates from an SQL injection issue in the grade parameter of the...
Advanced School Management System SQL Injection Vulnerability (CNVD-2022-68965)
Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /gettimetable.php?id=The page lacks validation for external SQL statements, which cou...
CVE-2022-32371
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getteacher.php?id=...
CVE-2022-32372
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getsubject.php?id=...
Sql injection
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getclassroom.php?id=...
CVE-2022-32372
Affected software : itsourcecode Advanced School Management System v1.0 (open source PHP/MySQL-based). Vulnerability : SQL Injection via /school/model/get_subject.php?id= (unsafely handling user input in a SQL query). Root cause : input parameter not sanitized/filtered before database query. Impa...