CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

384 matches found

Positive Technologies•added 2025/12/12 12:0 a.m.•7 views

PT-2025-51029

Name of the Vulnerable Software and Affected Versions campcodes Online Student Enrollment System version 1.0 Description A flaw exists in campcodes Online Student Enrollment System that allows for unrestricted file upload. The issue is related to the manipulation of the photo argument within the...

7.5CVSS7.4AI score0.00438EPSS

Exploits1References7

CNNVD•added 2025/12/12 12:0 a.m.•7 views

CampCodes Online Student Enrollment System 代码问题漏洞

CampCodes Online Student Enrollment System is an online enrollment system from CampCodes Philippines, Inc. A code issue vulnerability exists in version 1.0 of the campcodes Online Student Enrollment System, which stems from the incorrect manipulation of the parameter photo in the file...

9.8CVSS7.5AI score0.00438EPSS

Exploits1References6

RedhatCVE•added 2025/12/05 9:34 p.m.•6 views

CVE-2024-58276

Obi08/Enrollment System 1.0 contains a SQL injection vulnerability in the keyword parameter of /getsubject.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can use UNION-based injection to extract sensitive information from the users table including usernames...

8.7CVSS8.3AI score0.00356EPSS

Exploits0References1

CNNVD•added 2025/12/04 12:0 a.m.•5 views

Enrollment System SQL注入漏洞

Enrollment System is an enrollment system software by Obi08 Individual Developer. A SQL injection vulnerability exists in Enrollment System version 1.0, which originates from SQL injection of the parameter keyword in /getsubject.php, which may result in the extraction of sensitive information...

8.7CVSS7.8AI score0.00356EPSS

Exploits0References3

RedhatCVE•added 2025/11/19 12:10 a.m.•16 views

CVE-2025-13325

A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollmentedit1.php. Executing manipulation of the argument enid can lead to sql injection. The attack may be performed from remote. The exploit has been publicl...

8.8CVSS7AI score0.00276EPSS

Exploits1References1