CVE-2021-3294

CASAP Automated Enrollment System 1.0 is affected by cross-site scripting XSS in users.php. An attacker can steal a cookie to perform user redirection to a malicious website...

CVE-2021-3294

CVE-2021-3294 concerns the CASAP Automated Enrollment System 1.0. The vulnerability is a Stored Cross-Site Scripting (XSS) in users.php, arising from insufficient validation of user data in the “First Name” field, enabling an attacker to steal cookies and redirect victims to a malicious site. Pub...

CVE-2021-3294

CASAP Automated Enrollment System 1.0 is affected by cross-site scripting XSS in users.php. An attacker can steal a cookie to perform user redirection to a malicious website...

Logic Flaw Vulnerability in Tianyi Online Enrollment System

Tianyi Online Enrollment System is an online enrollment and payment system. A logic flaw vulnerability exists in the Tianyi Online Enrollment System that can be exploited by attackers to compromise confidentiality and integrity...

CASAP Automated Enrollment System 1.0 Cross Site Scripting

Exploit Title: CASAP Automated Enrollment System 1.0 - 'First Name' Stored XSS Exploit Author: Anita Gaud Vendor Homepage: https://www.sourcecodester.com/php/12210/casap-automated-enrollment-system.html Software Link:...

CASAP Automated Enrollment System 1.0 Cross Site Scripting

Exploit Title: CASAP ENROLLMENT SYSTEM 1.0 | CROSS SITE SCRIPTING Exploit Author: Richard Jones Date: 2021-01/23 Vendor Homepage: https://www.sourcecodester.com/php/12210/casap-automated-enrollment-system.html Software Link:...

CASAP Automated Enrollment System 1.0 - 'route' Stored XSS

Exploit Title: CASAP Automated Enrollment System 1.0 - 'route' Stored XSS Exploit Author: Richard Jones Date: 2021-01/23 Vendor Homepage: https://www.sourcecodester.com/php/12210/casap-automated-enrollment-system.html Software Link:...

CASAP Automated Enrollment System 1.0 - 'First Name' Stored XSS

Exploit Title: CASAP Automated Enrollment System 1.0 - 'First Name' Stored XSS Exploit Author: Anita Gaud Vendor Homepage: https://www.sourcecodester.com/php/12210/casap-automated-enrollment-system.html Software Link:...

CASAP Automated Enrollment System 1.0 Authentication Bypass

Exploit Title: CASAP Automated Enrollment System 1.0 - Authentication Bypass Exploit Author: Himanshu Shukla Date: 2021-01-21 Vendor Homepage: https://www.sourcecodester.com/php/12210/casap-automated-enrollment-system.html Software Link:...

SQL Injection Vulnerability in Zhirui Admission and Enrollment System

Zhi Rui admission and registration system is the positioning of education enrollment development system, specializing in colleges and universities, vocational and technical schools, training colleges and universities and private education, training institutions to develop enrollment and admission...

File upload vulnerability in waychar enrollment system (CNVD-2021-03305)

waychar online registration system, is an online registration system developed for sports events and other general events, supporting public numbers and small programs. A file upload vulnerability exists in the waychar registration system, which can be exploited by attackers to gain control of th...

Waychar enrollment system suffers from SQL injection vulnerability (CNVD-2021-03395)

Guangzhou City Huadu District Xinhua Weichuang Advertising Design Service Department business scope includes: advertising, network information technology promotion services, network security information consulting. Waychar enrollment system has a SQL injection vulnerability, which can be exploite...

Waychar enrollment system suffers from SQL injection vulnerability (CNVD-2021-03388)

Guangzhou City Huadu District Xinhua Weichuang Advertising Design Service Department business scope includes: advertising, network information technology promotion services, network security information consulting. Waychar enrollment system has a SQL injection vulnerability, which can be exploite...

Waychar enrollment system suffers from SQL injection vulnerability (CNVD-2021-03386)

Guangzhou City Huadu District Xinhua Weichuang Advertising Design Service Department business scope includes: advertising, network information technology promotion services, network security information consulting. Waychar enrollment system has a SQL injection vulnerability, which can be exploite...

SQL Injection Vulnerability in waychar enrollment system VER 0.30

Waychar Registration System is a free race registration system. A SQL injection vulnerability exists in waychar registration system VER 0.30, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in waychar Enrollment System Update File

Waychar Registration System is a free race registration system. A SQL injection vulnerability exists in the waychar registration system update file, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in the Certificate Search Function of waychar Enrollment System

Waychar Registration System is a free race registration system. A SQL injection vulnerability exists in the certificate lookup function of the waychar registration system, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in Waychar Enrollment System's Password Retrieval Function

Waychar Registration System is a free race registration system. A SQL injection vulnerability exists in the retrieve password function of the waychar registration system, which can be exploited by an attacker to obtain sensitive information from the database...

Online Student Enrollment System 1.0 - Shell Upload

This Metasploit module exploits a cross site request forgery vulnerability in Online Student Enrollment System This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require "net/http" require "uri" requir...

Online Student Enrollment System 1.0 Shell Upload

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require "net/http" require "uri" require 'nokogiri' class MetasploitModule 'Online Student Enrollment System v1.0 Shell Upload ', 'Description' = %q...