Library Management System SQL Injection Vulnerability

Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A SQL injection vulnerability exists in Library Management System version 2.0, which stems from the presence of SQL injection...

Simple Student Attendance System Security Vulnerability

Simple Student Attendance System is a simple student attendance system. A security vulnerability exists in Simple Student Attendance System version v.1.0. An attacker can exploit this vulnerability to execute arbitrary code via a specially crafted payload on the page or classmonth parameter in th...

PT-2024-14296 · Unknown · Simple Student Attendance System

Name of the Vulnerable Software and Affected Versions: Simple Student Attendance System version 1.0 Description: A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code via a crafted payload to the page or class month parameter in the "/php-attendance/attendance report...

CVE-2024-1923

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as critical. Affected by this issue is the function deleteclass/deletestudent of the file /ajax-api.php of the component List of Classes Page. The manipulation of the argument id with the input...

CVE-2024-1923

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as critical. Affected by this issue is the function deleteclass/deletestudent of the file /ajax-api.php of the component List of Classes Page. The manipulation of the argument id with the input...

CVE-2024-1923

SourceCodester Simple Student Attendance System 1.0 is affected by a SQL injection in the List of Classes Page, in the AJAX endpoint /ajax-api.php (delete_class/delete_student) via the id parameter with payload like 1337'+or+1=1;--+. This remote, unauthenticated vulnerability is triggered by user...

CVE-2024-1923 SourceCodester Simple Student Attendance System List of Classes Page ajax-api.php delete_student sql injection

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as critical. Affected by this issue is the function deleteclass/deletestudent of the file /ajax-api.php of the component List of Classes Page. The manipulation of the argument id with the input...

CVE-2024-1923 SourceCodester Simple Student Attendance System List of Classes Page ajax-api.php delete_student sql injection

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as critical. Affected by this issue is the function deleteclass/deletestudent of the file /ajax-api.php of the component List of Classes Page. The manipulation of the argument id with the input...

CVE-2024-1834

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as problematic. This affects an unknown part of the file ?page=attendance&classid=1. The manipulation of the argument classdate with the input 2024-02-23%22%3E%3Cscript%3Ealert1%3C/script%3E...

Cross site scripting

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as problematic. This affects an unknown part of the file ?page=attendance&classid=1. The manipulation of the argument classdate with the input 2024-02-23%22%3E%3Cscript%3Ealert1%3C/script%3E...

CVE-2024-1834

The CVE-2024-1834 entry describes a cross-site scripting (XSS) vulnerability in SourceCodester Simple Student Attendance System 1.0, affecting an unknown portion of the file at the endpoint ?page=attendance&class_id=1. By manipulating the class_date (examples show 2024-02-23%22%3E%3Cscript%3Ealer...

CVE-2024-1834 SourceCodester Simple Student Attendance System ?page=attendance&class_id=1 cross site scripting

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as problematic. This affects an unknown part of the file ?page=attendance&classid=1. The manipulation of the argument classdate with the input 2024-02-23%22%3E%3Cscript%3Ealert1%3C/script%3E...

CVE-2024-25302

Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter...

CVE-2024-25302

Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter...

Sql injection

Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter...

PT-2024-20872 · Sourcecodester · Sourcecodester Student Attendance Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Event Student Attendance System version 1.0 Description: The issue allows SQL Injection via the student parameter. This could potentially lead to unauthorized access or manipulation of database content. There is no information...

CVE-2024-25302

Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter...

Event Student Attendance System SQL Injection Vulnerability

Event Student Attendance System is a student event attendance system by the individual developer Remy Andrade. An SQL injection vulnerability exists in Event Student Attendance System version 1.0, which originates from allowing SQL injection via the student parameter...

CVE-2024-25302

Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter...

CVE-2024-25302

CVE-2024-25302 affects Sourcecodester Event Student Attendance System 1.0. The vulnerability is a SQL Injection in the parameter named student , as reported across sources (NVD/Red Hat/CNNVD/etc.). The root cause is improper handling of input leading to database query manipulation; no explicit ex...