6677 matches found
Online Student Rate System Cross-Site Scripting Vulnerability
Online Student Rate System is an online grading system for students. v1.0 of the Online Student Rate System is vulnerable to a cross-site scripting vulnerability that stems from a lack of validation filtering of user-supplied data and output data in the page parameter of the index.php file. An...
Potential interests are not distributed fairly among the zcTokens holders, nor taken as a protocol fee, but will be frozen in the redeemer contract
Lines of code Vulnerability details function authRedeem address u, uint256 m, address f, address t, uint256 a public authorizedIMarketPlacemarketPlace.marketsu, m, 0 returns bool // Get the principal token for the given market IERC5095 pt = IERC5095IMarketPlacemarketPlace.marketsu, m, 0; // Make...
CVE-2021-39409
A vulnerability exists in Online Student Rate System v1.0 that allows any user to register as an administrator without needing to be authenticated...
CVE-2021-39409
A vulnerability exists in Online Student Rate System v1.0 that allows any user to register as an administrator without needing to be authenticated...
CVE-2021-39408
Cross Site Scripting XSS vulnerability exists in Online Student Rate System 1.0 via the page parameter on the index.php file...
CVE-2021-39408
Cross Site Scripting XSS vulnerability exists in Online Student Rate System 1.0 via the page parameter on the index.php file...
CVE-2021-39408
Cross Site Scripting XSS vulnerability exists in Online Student Rate System 1.0 via the page parameter on the index.php file...
CVE-2021-39409
A vulnerability exists in Online Student Rate System v1.0 that allows any user to register as an administrator without needing to be authenticated...
Cross site scripting
Cross Site Scripting XSS vulnerability exists in Online Student Rate System 1.0 via the page parameter on the index.php file...
Design/Logic Flaw
A vulnerability exists in Online Student Rate System v1.0 that allows any user to register as an administrator without needing to be authenticated...
CVE-2021-39409
A vulnerability exists in Online Student Rate System v1.0 that allows any user to register as an administrator without needing to be authenticated...
CVE-2021-39409
CVE-2021-39409 affects Online Student Rate System v1.0. The flaw is an access control error that allows any unauthenticated user to register as an administrator, effectively granting admin privileges and broad control over the system. The issue is documented across multiple sources (Red Hat, CNVD...
CVE-2021-39408
Cross Site Scripting XSS vulnerability exists in Online Student Rate System 1.0 via the page parameter on the index.php file...
CVE-2021-39408
The CVE-2021-39408 entry applies to Online Student Rate System v1.0. Affected: index.php page parameter handling in the application. Root cause: lack of input validation/escaping of user-supplied data in the page parameter leading to Cross-Site Scripting (XSS). Impact: attacker could cause client...
PT-2022-10911 · Unknown · Online Student Rate System
Name of the Vulnerable Software and Affected Versions: Online Student Rate System version 1.0 Description: A vulnerability exists in the Online Student Rate System that allows any user to register as an administrator without needing to be authenticated. Recommendations: For Online Student Rate...
Online Student Rate System 安全漏洞
Online Student Rate System is an online grading system for students. An Access Control Error vulnerability exists in Online Student Rate System v1.0, which arises from improper access control and can be exploited by any attacker to register as an administrator without authentication...
PT-2022-10910
Name of the Vulnerable Software and Affected Versions Online Student Rate System version 1.0 Description A Cross Site Scripting XSS issue exists via the page parameter on the "index.php" file. This allows for potential malicious script execution. Recommendations For Online Student Rate System...
CVE-2021-39409: Undefined Security Weakness
A vulnerability exists in Online Student Rate System v1.0 that allows any user to register as an administrator without needing to be authenticated...
CVE-2021-39408: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability exists in Online Student Rate System 1.0 via the page parameter on the index.php file...
