64 matches found
PT-2021-16968
Name of the Vulnerable Software and Affected Versions SourceCodester CASAP Automated Enrollment System version 1.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the student information parameters to the "edit stud.php" endpoint. Th...
PT-2021-16967
Name of the Vulnerable Software and Affected Versions SourceCodester CASAP Automated Enrollment System version 1.0 Description The issue allows remote attackers to execute arbitrary SQL statements. This is achieved via the id parameter to the "edit user.php" endpoint. Recommendations For...
CVE-2021-27332: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the classname parameter to updateclass.php...
PT-2021-16969
Name of the Vulnerable Software and Affected Versions SourceCodester CASAP Automated Enrollment System version 1.0 Description The issue allows remote attackers to execute arbitrary SQL statements. This is achieved via the id parameter to the "edit class1.php" endpoint. Recommendations For...
Cross site scripting
CASAP Automated Enrollment System version 1.0 contains a cross-site scripting XSS vulnerability through the Students Edit ROUTE parameter...
CVE-2021-27129: Improper Neutralization of Input During Web Page Generation
CASAP Automated Enrollment System version 1.0 contains a cross-site scripting XSS vulnerability through the Students Edit ROUTE parameter...
CASAP Automated Enrollment System 1.1 SQL Injection
Exploit Title: CASAP Automated Enrollment System 1.1 - Authentication Bypass cookie session Exploit Author: @nu11secur1ty Date: 03.02.2021 Vendor Homepage: https://www.sourcecodester.com/php/12210/casap-automated-enrollment-system.html Software Link:...
CASAP Automated Enrollment System 1.0 Cross Site Scripting
Exploit Title: CASAP Automated Enrollment System 1.0 - 'First Name' Stored XSS Author: nu11secur1ty Date: 02.15.2021 Vendor: https://www.sourcecodester.com/php/12210/casap-automated-enrollment-system.html Software Athor: https://www.sourcecodester.com/users/yna-ecole Link:...
Sql injection
The Login Panel of CASAP Automated Enrollment System 1.0 is vulnerable to SQL injection authentication bypass. An attacker can obtain access to the admin panel by injecting a SQL query in the username field of the login page...
CVE-2021-26201
The CVE-2021-26201 issue affects the CASAP Automated Enrollment System (CASAP) Login Panel, with an authentication bypass achieved via SQL injection in the username field. The vulnerability is documented for CASAP versions around 1.0 (and references to 1.1 in exploit materials), enabling an attac...
PT-2021-16964
Name of the Vulnerable Software and Affected Versions CASAP Automated Enrollment System version 1.0 Description The issue concerns the Login Panel of the system, which is susceptible to SQL injection. This allows an attacker to bypass authentication and gain access to the admin panel by injecting...
CVE-2021-26201: Improper Neutralization of Special Elements used in an SQL Command
The Login Panel of CASAP Automated Enrollment System 1.0 is vulnerable to SQL injection authentication bypass. An attacker can obtain access to the admin panel by injecting a SQL query in the username field of the login page...
CVE-2021-3294
CASAP Automated Enrollment System 1.0 is affected by cross-site scripting XSS in users.php. An attacker can steal a cookie to perform user redirection to a malicious website...
Cross site scripting
CASAP Automated Enrollment System 1.0 is affected by cross-site scripting XSS in users.php. An attacker can steal a cookie to perform user redirection to a malicious website...
CVE-2021-3294: Improper Neutralization of Input During Web Page Generation
CASAP Automated Enrollment System 1.0 is affected by cross-site scripting XSS in users.php. An attacker can steal a cookie to perform user redirection to a malicious website...
CVE-2021-3294
CVE-2021-3294 concerns the CASAP Automated Enrollment System 1.0. The vulnerability is a Stored Cross-Site Scripting (XSS) in users.php, arising from insufficient validation of user data in the “First Name” field, enabling an attacker to steal cookies and redirect victims to a malicious site. Pub...
CVE-2021-3294
CASAP Automated Enrollment System 1.0 is affected by cross-site scripting XSS in users.php. An attacker can steal a cookie to perform user redirection to a malicious website...
CASAP-Automated-Enrollment-System
CASAP-Automated-Enrollment-System Exploit Title: CASAP-Au...
CASAP Automated Enrollment System 1.0 - 'route' Stored XSS
Exploit Title: CASAP Automated Enrollment System 1.0 - 'route' Stored XSS Exploit Author: Richard Jones Date: 2021-01/23 Vendor Homepage: https://www.sourcecodester.com/php/12210/casap-automated-enrollment-system.html Software Link:...
CASAP Automated Enrollment System 1.0 - 'First Name' Stored XSS
Exploit Title: CASAP Automated Enrollment System 1.0 - 'First Name' Stored XSS Exploit Author: Anita Gaud Vendor Homepage: https://www.sourcecodester.com/php/12210/casap-automated-enrollment-system.html Software Link:...