CVE-2024-5391 itsourcecode Online Student Enrollment System listofsubject.php sql injection

A vulnerability has been found in itsourcecode Online Student Enrollment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file listofsubject.php. The manipulation of the argument subjcode leads to sql injection. The attack can be launched...

CVE-2024-5391 itsourcecode Online Student Enrollment System listofsubject.php sql injection

A vulnerability has been found in itsourcecode Online Student Enrollment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file listofsubject.php. The manipulation of the argument subjcode leads to sql injection. The attack can be launched...

CVE-2024-5390

CVE-2024-5390 concerns the Online Student Enrollment System 1.0. The vulnerability exists in an unknown function within listofstudent.php, where manipulating the lname argument enables SQL injection. This can be exploited remotely, and public disclosures have occurred (VDB-266304). The connected ...

CVE-2024-5390: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in itsourcecode Online Student Enrollment System 1.0. Affected is an unknown function of the file listofstudent.php. The manipulation of the argument lname leads to sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2024-5394: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file newDept.php. The manipulation of the argument deptname leads to sql injection. The attack can be initiated remotely. The exploit ha...

CVE-2024-5396: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in itsourcecode Online Student Enrollment System 1.0. Affected is an unknown function of the file newfaculty.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-5397: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in itsourcecode Online Student Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file instructorSubjects.php. The manipulation of the argument instructorId leads to sql injection. The attack can be launched...

CVE-2024-5391: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Online Student Enrollment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file listofsubject.php. The manipulation of the argument subjcode leads to sql injection. The attack can be launched...

CVE-2024-5381

A vulnerability classified as critical was found in itsourcecode Student Information Management System 1.0. Affected by this vulnerability is an unknown functionality of the file view.php. The manipulation of the argument studentId leads to sql injection. The attack can be launched remotely. The...

CVE-2024-5381

A vulnerability classified as critical was found in itsourcecode Student Information Management System 1.0. Affected by this vulnerability is an unknown functionality of the file view.php. The manipulation of the argument studentId leads to sql injection. The attack can be launched remotely. The...

CVE-2024-5381

CVE-2024-5381 affects itsourcecode Student Information Management System 1.0. The vulnerability exists in the file view.php via manipulation of the studentId parameter, causing SQL injection. Exploitation can be remote, and multiple sources report that the exploit has been disclosed publicly. Con...

CVE-2024-5381 itsourcecode Student Information Management System view.php sql injection

A vulnerability classified as critical was found in itsourcecode Student Information Management System 1.0. Affected by this vulnerability is an unknown functionality of the file view.php. The manipulation of the argument studentId leads to sql injection. The attack can be launched remotely. The...

itsourcecode Student Information Management System SQL注入漏洞

Student Information Management System is an itsourcecode open source student information management system. itsourcecode Student Information Management System version 1.0 SQL injection vulnerability exists , the vulnerability stems from the view.php there is an unknown function , through the...

CVE-2024-3768

A vulnerability, which was classified as critical, has been found in PHPGurukul/itsourcecode News Portal 4.1. This issue affects some unknown processing of the file search.php. The manipulation of the argument searchtitle leads to sql injection. The attack may be initiated remotely. The exploit h...

CVE-2024-3768: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul/itsourcecode News Portal 4.1. This issue affects some unknown processing of the file search.php. The manipulation of the argument searchtitle leads to sql injection. The attack may be initiated remotely. The exploit h...

CVE-2023-34486: Improper Neutralization of Input During Web Page Generation

itsourcecode Online Hotel Management System Project In PHP v1.0.0 is vulnerable to Cross Site Scripting XSS. Remote code execution can be achieved by entering malicious code in the date selection box...

CVE-2023-34486

itsourcecode Online Hotel Management System Project In PHP v1.0.0 is vulnerable to Cross Site Scripting XSS. Remote code execution can be achieved by entering malicious code in the date selection box...

PT-2023-24904 · Unknown · Itsourcecode Online Hotel Management System Project In Php

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Hotel Management System Project In PHP version 1.0.0 Description: The issue concerns SQL injection points existing in the login password input box. This can be exploited through time-based blind injection. Recommendations:...

CVE-2022-34588

The CVE-2022-34588 entry concerns itsourcecode Advanced School Management System v1.0. A SQL Injection vulnerability exists in the grade parameter of the /school/view/timetable_insert_form.php endpoint. The issue is the classic improper handling of user-controlled input that leads to SQL query ma...

PT-2022-22220

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue concerns SQL Injection via the grade parameter at the "/school/view/student grade wise.php" API endpoint. This allows for potential unauthorized access to sensiti...