CVE-2021-26226

SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edituser.php...

CVE-2021-26227

The CVE-2021-26227 entry describes a Cross-Site Scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v1.0. The affected component is the edit_stud.php flow, where attacker-controlled student information parameters can be manipulated to inject arbitrary web script/HTML...

CVE-2021-26230

The CVE-2021-26230 entry describes a Cross-Site Scripting (XSS) vulnerability in the SourceCodester CASAP Automated Enrollment System v1.0. Attackers can inject arbitrary web script or HTML via user information submitted to save_user.php, enabling remote exploitation. Connected records corroborat...

CVE-2021-26230

Cross-site scripting XSS vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the user information to saveuser.php...

CVE-2021-26228

CVE-2021-26228 concerns SourceCodester CASAP Automated Enrollment System v1.0, where an SQL injection via the id parameter to edit_class1.php allows remote attackers to execute arbitrary SQL statements. The vulnerability arises from improper sanitization of user-supplied input in the edit_class1....

CVE-2021-26229

The CVE-2021-26229 entry concerns SourceCodester CASAP Automated Enrollment System v1.0, with an SQL injection vulnerability in edit_stud.php exploitable via the id parameter. The defect allows remote attackers to execute arbitrary SQL statements; exploitation data indicates a high/severe impact ...

CASAP Automated Enrollment 跨站脚本漏洞

CASAP Automated Enrollment is an automated enrollment system from the CASAP organization. The goal of the project is to provide CASAP with an automated enrollment system to streamline the school process and make it more effective, efficient and easily retrievable. SourceCodester CASAP Automated...

SQL Injection Vulnerability in Waychar Enrollment System (CNVD-2021-47132)

Waychar is a free, full-featured open enrollment system. The Waychar enrollment system suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information from the database...

Waychar enrollment system suffers from SQL injection vulnerability (CNVD-2021-47136)

Waychar is a free, full-featured open enrollment system. The Waychar enrollment system suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information from the database...

CVE-2021-27129

CASAP Automated Enrollment System version 1.0 contains a cross-site scripting XSS vulnerability through the Students Edit ROUTE parameter...

Cross site scripting

CASAP Automated Enrollment System version 1.0 contains a cross-site scripting XSS vulnerability through the Students Edit ROUTE parameter...

CVE-2021-27129

CASAP Automated Enrollment System version 1.0 contains a cross-site scripting XSS vulnerability through the Students Edit ROUTE parameter...

CVE-2021-27129

The CVE-2021-27129 entry concerns the CASAP Automated Enrollment System version 1.0, which has a cross-site scripting (XSS) vulnerability via the Students > Edit > ROUTE parameter. The affected component is the web application; the root cause is input handling of the ROUTE parameter leading...

PT-2021-17253

Name of the Vulnerable Software and Affected Versions: CASAP Automated Enrollment System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited through the ROUTE parameter, which is accessible via the Students Edit path...

Waychar enrollment system suffers from SQL injection vulnerability (CNVD-2021-24448)

Waychar Registration System is an online registration system developed for sporting events and other general purpose activities. A logic flaw vulnerability exists in the Waychar registration system. An attacker could exploit the vulnerability to obtain sensitive information from the database...

CASAP Automated Enrollment System 1.1 SQL Injection

Exploit Title: CASAP Automated Enrollment System 1.1 - Authentication Bypass cookie session Exploit Author: @nu11secur1ty Date: 03.02.2021 Vendor Homepage: https://www.sourcecodester.com/php/12210/casap-automated-enrollment-system.html Software Link:...

CASAP Automated Enrollment System Authentication Bypass (CVE-2021-26201)

An authentication bypass vulnerability exists in CASAP Automated Enrollment System. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...

CASAP Automated Enrollment System 1.0 Cross Site Scripting

Exploit Title: CASAP Automated Enrollment System 1.0 - 'First Name' Stored XSS Author: nu11secur1ty Date: 02.15.2021 Vendor: https://www.sourcecodester.com/php/12210/casap-automated-enrollment-system.html Software Athor: https://www.sourcecodester.com/users/yna-ecole Link:...

CVE-2021-26201

The Login Panel of CASAP Automated Enrollment System 1.0 is vulnerable to SQL injection authentication bypass. An attacker can obtain access to the admin panel by injecting a SQL query in the username field of the login page...

Sql injection

The Login Panel of CASAP Automated Enrollment System 1.0 is vulnerable to SQL injection authentication bypass. An attacker can obtain access to the admin panel by injecting a SQL query in the username field of the login page...