Lucene search
K

42 matches found

EUVD
EUVD
added 2026/04/05 3:30 a.m.1 views

EUVD-2026-19011

A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /logincredentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated remotel...

6.9CVSS5.6AI score0.00018EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/04/05 1:0 a.m.2 views

CVE-2026-5531

A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /logincredentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated remotel...

6.9CVSS5.4AI score0.00018EPSS
Exploits0References5Affected Software1
RedhatCVE
RedhatCVE
added 2026/03/26 3:18 p.m.2 views

CVE-2026-3983

A security flaw has been discovered in Campcodes Division Regional Athletic Meet Game Result Matrix System 2.1. This affects an unknown part of the file save-games.php. The manipulation of the argument gamename results in cross site scripting. The attack may be performed from remote. The exploit...

5.1CVSS4.2AI score0.00042EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/23 10:2 a.m.1 views

CVE-2026-2984

A vulnerability was identified in SourceCodester Student Result Management System 1.0. This affects an unknown function of the file /admin/core/dropuser.php. Such manipulation of the argument ID leads to denial of service. The attack can be executed remotely. The exploit is publicly available and...

6.9CVSS5.3AI score0.00154EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/22 8:32 a.m.3 views

CVE-2026-2938 SourceCodester Student Result Management System update_smtp.php access control

A vulnerability has been found in SourceCodester Student Result Management System 1.0. The affected element is an unknown function of the file /srms/script/admin/core/updatesmtp.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit ha...

7.5CVSS5.2AI score0.00065EPSS
Exploits1References5
Cvelist
Cvelist
added 2026/02/22 8:32 a.m.24 views

CVE-2026-2938 SourceCodester Student Result Management System update_smtp.php access control

A vulnerability has been found in SourceCodester Student Result Management System 1.0. The affected element is an unknown function of the file /srms/script/admin/core/updatesmtp.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit ha...

7.5CVSS0.00065EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/02/22 12:0 a.m.4 views

PT-2026-21425

Name of the Vulnerable Software and Affected Versions SourceCodester Student Result Management System version 1.0 Description A flaw exists that allows for improper access controls. The issue is located in an unknown function within the /srms/script/admin/core/update smtp.php file. This can be...

7.5CVSS7AI score0.00065EPSS
Exploits1References11
RedhatCVE
RedhatCVE
added 2026/01/09 12:36 p.m.1 views

CVE-2023-49980

A directory listing vulnerability in Best Student Result Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization...

7.5CVSS6.8AI score0.00568EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/28 9:51 a.m.7 views

CVE-2025-12257

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

9.8CVSS7.3AI score0.00032EPSS
Exploits1References1
NVD
NVD
added 2025/10/27 10:15 a.m.3 views

CVE-2025-12257

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

9.8CVSS0.00032EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/10/27 9:32 a.m.8 views

CVE-2025-12257 SourceCodester Online Student Result System view_result.php sql injection

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

7.5CVSS0.00032EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/27 9:32 a.m.3 views

CVE-2025-12257 SourceCodester Online Student Result System view_result.php sql injection

A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /viewresult.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has bee...

7.5CVSS6.8AI score0.00032EPSS
Exploits1References5
CVE
CVE
added 2025/10/27 9:32 a.m.6 views

CVE-2025-12257

CVE-2025-12257 affects SourceCodester Online Student Result System 1.0. The vulnerability is a SQL injection in the view_result.php handler, triggered by improper handling of the ID parameter, allowing remote exploitation. Multiple sources confirm the issue and that the exploit has been publicly ...

9.8CVSS7.1AI score0.00032EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.3 views

PT-2025-43916

Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Result System version 1.0 Description A security issue exists in SourceCodester Online Student Result System 1.0. The system is susceptible to SQL injection due to improper handling of the ID parameter within the...

9.8CVSS7.5AI score0.00032EPSS
Exploits1References9
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.2 views

SourceCodester Online Student Result System SQL注入漏洞

SourceCodester Online Student Result System is a SourceCodester open source online student result system. A SQL injection vulnerability exists in SourceCodester Online Student Result System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /viewresult.php, which...

9.8CVSS7.8AI score0.00032EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/11 3:33 p.m.2 views

EUVD-2025-33864

A vulnerability was detected in SourceCodester Online Student Result System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing manipulation of the argument Username results in sql injection. The attack can be initiated remotely. The exploit is now...

7.5CVSS6.6AI score0.00042EPSS
Exploits1References6
OSV
OSV
added 2025/10/11 1:15 p.m.1 views

CVE-2025-11601

A vulnerability was detected in SourceCodester Online Student Result System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing manipulation of the argument Username results in sql injection. The attack can be initiated remotely. The exploit is now...

9.8CVSS5.8AI score
Exploits0References5
NVD
NVD
added 2025/10/11 1:15 p.m.2 views

CVE-2025-11601

A vulnerability was detected in SourceCodester Online Student Result System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing manipulation of the argument Username results in sql injection. The attack can be initiated remotely. The exploit is now...

9.8CVSS0.00042EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/11 1:2 p.m.1 views

CVE-2025-11601 SourceCodester Online Student Result System login.php sql injection

A vulnerability was detected in SourceCodester Online Student Result System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. Performing manipulation of the argument Username results in sql injection. The attack can be initiated remotely. The exploit is now...

7.5CVSS6.8AI score0.00042EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/10/11 12:0 a.m.2 views

SourceCodester Online Student Result System SQL注入漏洞

SourceCodester Online Student Result System is a SourceCodester open source online student result system. A SQL injection vulnerability exists in SourceCodester Online Student Result System version 1.0, which stems from an incorrect manipulation of the parameter Username in the file /login.php,...

9.8CVSS7.8AI score0.00042EPSS
Exploits1References5
Rows per page
Query Builder