EUVD-2025-6657

Malicious code in bioql PyPI...

StudentManage security vulnerability

StudentManage is a student management system by DayCloud Individual Developer in China. A security vulnerability exists in StudentManage version 1.0, which stems from the mishandling of the Add A New Course module and may lead to cross-site scripting attacks...

CVE-2025-2351

A vulnerability classified as critical was found in DayCloud StudentManage 1.0. This vulnerability affects unknown code of the file /admin/adminScoreUrl of the component Login Endpoint. The manipulation of the argument query leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-2351

A vulnerability classified as critical was found in DayCloud StudentManage 1.0. This vulnerability affects unknown code of the file /admin/adminScoreUrl of the component Login Endpoint. The manipulation of the argument query leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-2351 DayCloud StudentManage Login Endpoint adminScoreUrl sql injection

A vulnerability classified as critical was found in DayCloud StudentManage 1.0. This vulnerability affects unknown code of the file /admin/adminScoreUrl of the component Login Endpoint. The manipulation of the argument query leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-2351 DayCloud StudentManage Login Endpoint adminScoreUrl sql injection

A vulnerability classified as critical was found in DayCloud StudentManage 1.0. This vulnerability affects unknown code of the file /admin/adminScoreUrl of the component Login Endpoint. The manipulation of the argument query leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-2351

DayCloud StudentManage 1.0 is affected by an SQL injection in the login endpoint, specifically the /admin/adminScoreUrl file. The vulnerability results from unsafely handling an argument query, allowing remote exploitation without user interaction. No version details are provided for affected or ...

PT-2025-11444

Name of the Vulnerable Software and Affected Versions: DayCloud StudentManage version 1.0 Description: A critical vulnerability was found in DayCloud StudentManage, affecting the /admin/adminScoreUrl file of the Login Endpoint component. The manipulation of the query argument leads to SQL...

DayCloud StudentManage injection vulnerability

DayCloud StudentManage is a student management system for DayCloud individual developers. An injection vulnerability exists in DayCloud StudentManage version 1.0, which stems from SQL injection and could lead to a remote attack...

CVE-2025-2351: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in DayCloud StudentManage 1.0. This vulnerability affects unknown code of the file /admin/adminScoreUrl of the component Login Endpoint. The manipulation of the argument query leads to sql injection. The attack can be initiated remotely. The exploi...