CVE-2024-4803 Kashipara College Management System submit_admin.php sql injection

A vulnerability was found in Kashipara College Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file submitadmin.php. The manipulation of the argument phone leads to sql injection. The attack can be launched remotely. The...

CVE-2024-4803 Kashipara College Management System submit_admin.php sql injection

A vulnerability was found in Kashipara College Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file submitadmin.php. The manipulation of the argument phone leads to sql injection. The attack can be launched remotely. The...

CVE-2024-4802

CVE-2024-4802 affects Kashipara College Management System 1.0. The vulnerability is in the file submit_extracurricular_activity.php and arises from manipulation of the activity_datetime parameter, causing a SQL injection. Exploitation can be remote and public exploits have been disclosed. Some so...

CVE-2024-4801

CVE-2024-4801 affects Kashipara College Management System 1.0. The vulnerability is a SQL injection in the address parameter of submit_new_faculty.php, exploitable remotely, with public disclosure of exploits. Multiple sources confirm the affected component path and vulnerability class, and refer...

CVE-2024-4801 Kashipara College Management System submit_new_faculty.php sql injection

A vulnerability was found in Kashipara College Management System 1.0 and classified as critical. This issue affects some unknown processing of the file submitnewfaculty.php. The manipulation of the argument address leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-4800 Kashipara College Management System submit_student.php sql injection

A vulnerability has been found in Kashipara College Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file submitstudent.php. The manipulation of the argument dateofbirth leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2024-4800 Kashipara College Management System submit_student.php sql injection

A vulnerability has been found in Kashipara College Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file submitstudent.php. The manipulation of the argument dateofbirth leads to sql injection. The attack can be initiated remotely. The exploit has...

College Management System Arbitrary File Upload (CVE-2022-32420)

An arbitrary file upload vulnerability exists in College Management System. Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the vulnerable system with administrative privileges...

CVE-2022-39179

College Management System v1.0 - Authenticated remote code execution. An admin user the authentication can be bypassed using SQL Injection that mentioned in my other report can upload .php file that contains malicious code via student.php file...

CVE-2022-39180

College Management System v1.0 - SQL Injection SQLi. By inserting SQL commands to the username and password fields in the login.php page...

CVE-2022-39179

College Management System v1.0 - Authenticated remote code execution. An admin user the authentication can be bypassed using SQL Injection that mentioned in my other report can upload .php file that contains malicious code via student.php file...

CVE-2022-39180

College Management System v1.0 - SQL Injection SQLi. By inserting SQL commands to the username and password fields in the login.php page...

Sql injection

College Management System v1.0 - Authenticated remote code execution. An admin user the authentication can be bypassed using SQL Injection that mentioned in my other report can upload .php file that contains malicious code via student.php file...

CVE-2022-39179 College Management System v1.0 - Authenticated remote code execution

College Management System v1.0 - Authenticated remote code execution. An admin user the authentication can be bypassed using SQL Injection that mentioned in my other report can upload .php file that contains malicious code via student.php file...

CVE-2022-39179 College Management System v1.0 - Authenticated remote code execution

College Management System v1.0 - Authenticated remote code execution. An admin user the authentication can be bypassed using SQL Injection that mentioned in my other report can upload .php file that contains malicious code via student.php file...

CVE-2022-39179

College Management System v1.0 is affected by an authenticated remote code execution through the student.php upload vector. A malicious admin can upload a .php file containing code after bypassing authentication via SQL Injection, enabling RCE on the server. The root cause is an upload mechanism ...

CVE-2022-39180 College Management System v1.0 - SQL Injection (SQLi)

College Management System v1.0 - SQL Injection SQLi. By inserting SQL commands to the username and password fields in the login.php page...

CVE-2022-39180

CVE-2022-39180 is a reported SQL Injection vulnerability affecting College Management System v1.0, exploitable via unsanitized input in the login.php username and password fields. The issue, documented across multiple feeds, has a CVSSv3.1 base score of 9.8 (CRITICAL) with NETWORK attack vector, ...

CVE-2022-39180 College Management System v1.0 - SQL Injection (SQLi)

College Management System v1.0 - SQL Injection SQLi. By inserting SQL commands to the username and password fields in the login.php page...

College Management System SQL注入漏洞

College Management System is a simple project organized by Code Projects. It is used to keep track of students, teachers, subjects, schedules and all things related to college. College Management System v1.0 suffers from a SQL injection vulnerability that can be exploited by an attacker to upload...