Sql injection

SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to viewpay.php...

CVE-2021-27332

The CVE-2021-27332 entry is confirmed to describe a Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v1.0. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the class_name parameter to update_class.php. The Red Hat, CN...

CVE-2021-27332

Cross-site scripting XSS vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the classname parameter to updateclass.php...

CVE-2021-26223

CVE-2021-26223 affects the SourceCodester CASAP Automated Enrollment System v1.0. The vulnerability is an SQL injection in the parameter id of view_pay.php, enabling remote attackers to execute arbitrary SQL statements. The issue is described as network-exposed with low attack complexity and no a...

CVE-2021-26226

SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edituser.php...

Sql injection

SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edituser.php...

CVE-2021-26230

Cross-site scripting XSS vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the user information to saveuser.php...

CVE-2021-26227

Cross-site scripting XSS vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the student information parameters to editstud.php...

Sql injection

SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to editclass1.php...

CVE-2021-26226

SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edituser.php...

CVE-2021-26230

The CVE-2021-26230 entry describes a Cross-Site Scripting (XSS) vulnerability in the SourceCodester CASAP Automated Enrollment System v1.0. Attackers can inject arbitrary web script or HTML via user information submitted to save_user.php, enabling remote exploitation. Connected records corroborat...

CVE-2021-26227: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the student information parameters to editstud.php...

CVE-2021-26229: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to editstud.php...

CVE-2021-26228: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to editclass1.php...

CVE-2021-26223: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to viewpay.php...

PT-2021-16970

Name of the Vulnerable Software and Affected Versions SourceCodester CASAP Automated Enrollment System version 1.0 Description The issue allows remote attackers to execute arbitrary SQL statements via the id parameter to "edit stud.php". This enables attackers to manipulate database queries,...

CVE-2021-26226: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edituser.php...

PT-2021-17400

Name of the Vulnerable Software and Affected Versions SourceCodester CASAP Automated Enrollment System version 1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the class name parameter to "update class.php" API endpoint. This enables attackers to perfor...

CVE-2021-26230: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the user information to saveuser.php...

PT-2021-16971

Name of the Vulnerable Software and Affected Versions SourceCodester CASAP Automated Enrollment System version 1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the user information to "save user.php". This can lead to cross-site scripting XSS attacks...