23 matches found
EUVD-2024-39688
Malicious code in bioql PyPI...
CVE-2024-42572
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php...
Art Gallery Management System manage-art-medium.php File SQL Injection Vulnerability
Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter artmed in the file /admin/manage-art-medium.php. An attacke...
CVE-2024-42573
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at dtmarks.php...
CVE-2024-42572
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php...
CVE-2024-42572
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php...
CVE-2024-42575
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at substaff.php...
CVE-2024-42575
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at substaff.php...
CVE-2024-42569
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at paidclass.php...
CVE-2024-42571
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at insertattendance.php...
CVE-2024-42569
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at paidclass.php...
CVE-2024-42571
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at insertattendance.php...
PT-2024-30031 · Unknown · School Management System
Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: A SQL injection issue was found in the School Management System via the medium parameter at the "admininsert.php" endpoint. This allows for potential exploitation. No...
PT-2024-30029 · Unknown · School Management System
Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: The issue is related to a SQL injection vulnerability. It occurs via the medium parameter at the "paidclass.php" endpoint. There is no information provided about the...
CVE-2024-42571
The CVE-2024-42571 entry concerns School Management System and identifies a SQL injection vulnerability in the insertattendance.php endpoint, exploitable via the medium parameter. Root cause as described: unsanitized input passed to SQL queries in insertattendance.php leading to potential disclos...
CVE-2024-42572
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php...
CVE-2024-42575
CVE-2024-42575 affects School Management System. A SQL injection flaw is present in the substaff.php endpoint, exploitable via the medium parameter. CVSS v3.1 metrics indicate a Base Score of 9.8 (CRITICAL) with Network attack vector, Low attack complexity, no privileges required, no user interac...
CVE-2024-42574
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at attendance.php...
School-Management-System 安全漏洞
School-Management-System is a school management system by the individual developer Jyothi Babu Araja. A security vulnerability exists in School-Management-System due to an SQL injection vulnerability in the medium parameter of the insertattendance.php page...
CVE-2024-42569
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at paidclass.php...