CVE-2023-29626

Yoga Class Registration System 1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at /admin/login.php...

School Registration and Fee System SQL注入漏洞

School Registration and Fee System is a school registration and fee system by hemedy99 individual developer. A SQL injection vulnerability exists in SourceCodester School Registration and Fee System version 1.0, which was discovered to contain a sql injection vulnerability via the parameter id...

Yoga Class Registration System 1.0 Cross Site Scripting Vulnerability

Exploit Title: Yoga Class Registration System - Cross Site Scripting Vulnerability Authenticated Exploit Author: Abdulhakim Öner Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/16097/yoga-class-registration-system-php-and-mysql-free-source-code.ht...

CVE-2023-27041

CVE-2023-27041 involves a SQL injection in the School Registration and Fee System v1.0, exploitable via the id parameter at /bilal final/edit_user.php. Core documents state a high-severity impact (CVSS 3.1: 9.8, CRITICAL; Confidentiality, Integrity, Availability are all High). Multiple sources co...

CVE-2023-1395

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as problematic. This vulnerability affects the function query of the file admin/user/list.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated...

CVE-2023-1395

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as problematic. This vulnerability affects the function query of the file admin/user/list.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated...

CVE-2023-1395 SourceCodester Yoga Class Registration System list.php query cross site scripting

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as problematic. This vulnerability affects the function query of the file admin/user/list.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated...

CVE-2023-1395

CVE-2023-1395 affects SourceCodester Yoga Class Registration System 1.0. The issue is in the admin/user/list.php query function: manipulating the name parameter leads to cross-site scripting. Exploitation can be remote and has been disclosed publicly. Connected sources note practical mitigations ...

CVE-2023-1395 SourceCodester Yoga Class Registration System list.php query cross site scripting

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as problematic. This vulnerability affects the function query of the file admin/user/list.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated...

CVE-2023-1366

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been classified as critical. This affects the function query of the file admin/categories/managecategory.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...

Sql injection

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been classified as critical. This affects the function query of the file admin/categories/managecategory.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...

CVE-2023-1366

CVE-2023-1366 affects SourceCodester Yoga Class Registration System 1.0, specifically the query function in admin/categories/manage_category.php. The root cause is unsafely handling the id parameter, enabling SQL injection that can be exploited remotely. Public disclosure is noted, with multiple ...

CVE-2023-1366 SourceCodester Yoga Class Registration System manage_category.php query sql injection

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been classified as critical. This affects the function query of the file admin/categories/managecategory.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...

Yoga Class Registration System 1.0 SQL Injection Vulnerability

Exploit Title: Authenticated POST based SQL Injection when delete user on Yoga Class Registration System Exploit Author: Ahmed Ismail @MrOz1l Vendor Homepage: https://www.sourcecodester.com/php/16097/yoga-class-registration-system-php-and-mysql-free-source-code.html Software Link: download link i...

CVE-2023-0981

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been classified as critical. Affected is an unknown function of the component Delete User. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifie...

CVE-2023-0982

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Add Class Entry. The manipulation of the argument id leads to sql injection. The attack can be launched...

CVE-2023-0980

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This issue affects some unknown processing of the file admin/registrations/updatestatus.php of the component Status Update Handler. The manipulation of the argument id leads to sql injection...

Sql injection

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been classified as critical. Affected is an unknown function of the component Delete User. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifie...

CVE-2023-0982

CVE-2023-0982 affects SourceCodester Yoga Class Registration System 1.0, in the Add Class Entry component. The vulnerability arises from manipulating the id parameter, enabling SQL injection and remote exploitation. Documents indicate a critical classification with remote attack capability; one r...

CVE-2023-0982 SourceCodester Yoga Class Registration System Add Class Entry sql injection

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Add Class Entry. The manipulation of the argument id leads to sql injection. The attack can be launched...