EUVD-2025-36175

A flaw has been found in Abdullah-Hasan-Sajjad Online-School up to f09dda77b4c29aa083ff57f4b1eb991b98b68883. This affects an unknown part of the file /studentLogin.php. This manipulation of the argument Email causes sql injection. The attack is possible to be carried out remotely. The exploit has...

CVE-2025-12277 Abdullah-Hasan-Sajjad Online-School studentLogin.php sql injection

A flaw has been found in Abdullah-Hasan-Sajjad Online-School up to f09dda77b4c29aa083ff57f4b1eb991b98b68883. This affects an unknown part of the file /studentLogin.php. This manipulation of the argument Email causes sql injection. The attack is possible to be carried out remotely. The exploit has...

CVE-2025-12277 Abdullah-Hasan-Sajjad Online-School studentLogin.php sql injection

A flaw has been found in Abdullah-Hasan-Sajjad Online-School up to f09dda77b4c29aa083ff57f4b1eb991b98b68883. This affects an unknown part of the file /studentLogin.php. This manipulation of the argument Email causes sql injection. The attack is possible to be carried out remotely. The exploit has...

CVE-2025-12277

CVE-2025-12277 affects Abdullah-Hasan-Sajjad Online-School. The vulnerability is a SQL injection in /studentLogin.php caused by improper handling of the Email parameter, allowing remote exploitation. Affected versions are prior to f09dda77b4c29aa083ff57f4b1eb991b98b68883. Exploitation is possible...

CVE-2025-12277: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Abdullah-Hasan-Sajjad Online-School up to f09dda77b4c29aa083ff57f4b1eb991b98b68883. This affects an unknown part of the file /studentLogin.php. This manipulation of the argument Email causes sql injection. The attack is possible to be carried out remotely. The exploit has...

Online-School SQL注入漏洞

Online-School is an online platform for schools by the individual developer Abdullah Hasan Sajjad Rafi. Online-School suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter Email in the file /studentLogin.php, which could lead to a SQL injection attack...

EUVD-2024-41290

Malicious code in bioql PyPI...

EUVD-2023-43870

Malicious code in bioql PyPI...

EUVD-2024-49163

Malicious code in bioql PyPI...

EUVD-2023-44008

Malicious code in bioql PyPI...

EUVD-2024-49359

Malicious code in bioql PyPI...

CVE-2024-8417

A vulnerability was found in 云课网络科技有限公司 Yunke Online School System up to 1.5.5. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/educloud/videobind.html. The manipulation leads to inclusion of sensitive information in source code. The attack can be...

CVE-2024-8707

A vulnerability was found in 云课网络科技有限公司 Yunke Online School System up to 3.0.6. It has been declared as problematic. This vulnerability affects the function downfile of the file application/admin/controller/Appadmin.php. The manipulation of the argument url leads to path traversal. The attack can...

CVE-2023-3381

A vulnerability classified as problematic was found in SourceCodester Online School Fees System 1.0. Affected by this vulnerability is an unknown functionality of the file /paysystem/datatable.php of the component GET Parameter Handler. The manipulation of the argument doj leads to cross site...

CVE-2023-3189

A vulnerability, which was classified as problematic, was found in SourceCodester Online School Fees System 1.0. This affects an unknown part of the file /paysystem/branch.php of the component POST Parameter Handler. The manipulation of the argument branch leads to cross site scripting. It is...

CVE-2024-8707

A vulnerability was found in 云课网络科技有限公司 Yunke Online School System up to 3.0.6. It has been declared as problematic. This vulnerability affects the function downfile of the file application/admin/controller/Appadmin.php. The manipulation of the argument url leads to path traversal. The attack can...

CVE-2024-8707 云课网络科技有限公司 Yunke Online School System Appadmin.php downfile path traversal

A vulnerability was found in 云课网络科技有限公司 Yunke Online School System up to 3.0.6. It has been declared as problematic. This vulnerability affects the function downfile of the file application/admin/controller/Appadmin.php. The manipulation of the argument url leads to path traversal. The attack can...

CVE-2024-8707

The CVE-2024-8707 vulnerability affects Yunke Online School System (versions up to 3.0.6). The flaw resides in the downfile function of application/admin/controller/Appadmin.php, where the url parameter enables path traversal. Exploitation can be performed remotely and exploits have been disclose...

CVE-2024-8707 云课网络科技有限公司 Yunke Online School System Appadmin.php downfile path traversal

A vulnerability was found in 云课网络科技有限公司 Yunke Online School System up to 3.0.6. It has been declared as problematic. This vulnerability affects the function downfile of the file application/admin/controller/Appadmin.php. The manipulation of the argument url leads to path traversal. The attack can...

CVE-2024-8707: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in 云课网络科技有限公司 Yunke Online School System up to 3.0.6. It has been declared as problematic. This vulnerability affects the function downfile of the file application/admin/controller/Appadmin.php. The manipulation of the argument url leads to path traversal. The attack can...