945 matches found
Simple Student Information System SQL注入漏洞
Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can help a university or college to manage student information and academic records. Simple Student Information System suffers from a SQL injection vulnerability that stems from som...
CVE-2022-2705
A vulnerability was found in SourceCodester Simple Student Information System. It has been rated as critical. This issue affects some unknown processing of the file admin/departments/managedepartment.php. The manipulation of the argument id with the input...
CVE-2022-2705
CVE-2022-2705 affects SourceCodester Simple Student Information System, with a SQL injection in admin/departments/manage_department.php via the id parameter (example input: -5756%27%20UNION%20ALL%20SELECT%20NULL,database(),user(),NULL,NULL,NULL,NULL--). Multiple sources confirm the vulnerability ...
PT-2022-18194 · Sourcecodester · Sourcecodester Simple Student Information System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Student Information System affected versions not specified Description: A critical issue affects the processing of the file admin/departments/manage department.php. The manipulation of the argument id with a specific inp...
Simple Student Information System SQL注入漏洞
Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can help a university or college to manage student information and academic records. Simple Student Information System has an SQL injection vulnerability that originates from some...
Sims 路径遍历漏洞
Sims is a student information management system by the Chinese individual developer RawChen. A security vulnerability exists in Sims v1.0, which originates from allowing path traversal when downloading attachments...
Hospital Information System 1.0 SQL Injection
Exploit Title: Hospital Information System - SQL Injection via login page Date: 25/07/2022 Exploit Author: saitamang Vendor Homepage: https://code-projects.org Software Link: https://download-media.code-projects.org/2019/11/HOSPITALINFORMATIONSYSTEMINPHPWITHSOURCECODE.zip Version: 1.0 Tested on:...
CVE-2022-30707
Violation of secure design principles exists in the communication of CAMS for HIS. Affected products and versions are CENTUM series where LHS4800 is installed CENTUM CS 3000 and CENTUM CS 3000 Small R3.08.10 to R3.09.00, CENTUM series where CAMS function is used CENTUM VP, CENTUM VP Small, and...
RosarioSIS SQL Injection Vulnerability
RosarioSIS is a student information system. Used to manage students, create reports and make sound decisions, a SQL injection vulnerability exists in versions of RosarioSIS prior to 9.0, which stems from the application's lack of validation of externally entered SQL statements. An attacker could...
CVE-2022-26476
A vulnerability has been identified in Spectrum Power 4 All versions using Shared HIS, Spectrum Power 7 All versions using Shared HIS, Spectrum Power MGMS All versions using Shared HIS. An unauthenticated attacker could log into the component Shared HIS used in Spectrum Power systems by using an...
Siemens Spectrum Power 信任管理问题漏洞
Spectrum Power provides the basic components for SCADA, communications and data modeling for control and monitoring systems. Application suites can be added to optimize network and generation management in all areas of energy management.Spectrum Power MGMS is an advanced control and optimization...
Rosariosis Cross-Site Scripting Vulnerability (CNVD-2022-46169)
RosarioSIS Student Information System, designed for school administration, is designed to meet the most important needs of administrators, teachers, support staff, parents, students and clerical staff, however, it also adds many components not normally found in student information systems. versio...
CVE-2022-1819
A vulnerability, which was classified as problematic, was found in Student Information System 1.0. Affected is admin/?page=students of the Student Roll module. The manipulation with the input alert1 leads to authenticated cross site scripting. Exploit details have been disclosed to the public...
CVE-2022-1819
A vulnerability, which was classified as problematic, was found in Student Information System 1.0. Affected is admin/?page=students of the Student Roll module. The manipulation with the input alert1 leads to authenticated cross site scripting. Exploit details have been disclosed to the public...
Cross site scripting
A vulnerability, which was classified as problematic, was found in Student Information System 1.0. Affected is admin/?page=students of the Student Roll module. The manipulation with the input alert1 leads to authenticated cross site scripting. Exploit details have been disclosed to the public...
CVE-2022-1819 Student Information System Student Roll Module cross site scripting
A vulnerability, which was classified as problematic, was found in Student Information System 1.0. Affected is admin/?page=students of the Student Roll module. The manipulation with the input alert1 leads to authenticated cross site scripting. Exploit details have been disclosed to the public...
CVE-2022-1819
CVE-2022-1819 affects the Student Information System 1.0, specifically the admin/?page=students path in the Student Roll module. The vulnerability is an authenticated cross-site scripting (XSS) flaw triggered by input manipulation of the form . Exploit details have been disclosed publicly. The pr...
CVE-2022-1819 Student Information System Student Roll Module cross site scripting
A vulnerability, which was classified as problematic, was found in Student Information System 1.0. Affected is admin/?page=students of the Student Roll module. The manipulation with the input alert1 leads to authenticated cross site scripting. Exploit details have been disclosed to the public...
Student Information System 跨站脚本漏洞
oretnom23 Student Information System is a student information system by the individual developer oretnom23. A security vulnerability exists in Student Information System version 1.0, which stems from a cross-site scripting issue in admin/?page=students of the Student Roll module...
UniverSIS-students 信息泄露漏洞
UniverSIS-students is the interface for all student interactions in UniverSIS. An information disclosure vulnerability exists in UniverSIS-students prior to version 1.5.0, which stems from a lack of sensitive information protection in /api/students/me/courses/. An attacker can use this...