CVE-2022-32376

CVE-2022-32376 affects itsourcecode Advanced School Management System v1.0 and is caused by SQL injection in the parameter event_id of /school/model/get_events.php. The vulnerability arises from unvalidated external input, enabling attackers to manipulate SQL statements and potentially access or ...

CVE-2022-32377

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getexamtimetable.php?id=...

CVE-2022-32378

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getteacherprofile.php?myindex=...

CVE-2022-32378

CVE-2022-32378 covers SQL Injection in the itsourcecode Advanced School Management System v1.0. The vulnerability is reachable via /school/model/get_teacher_profile.php?my_index= and arises from lack of input validation on external input, allowing attackers to manipulate SQL statements. The issue...

CVE-2022-32379

CVE-2022-32379 affects itsourcecode Advanced School Management System v1.0, vulnerable to SQL Injection via /school/model/get_parents_profile.php?my_index=. The root cause is lack of validation for externally supplied SQL statements, enabling an attacker to potentially access or modify sensitive ...

CVE-2022-32380

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getstudentsubject.php?index=...

CVE-2022-32380

CVE-2022-32380 affects itsourcecode Advanced School Management System v1.0. The vulnerability is SQL Injection in the get_student_subject.php script (via index parameter), caused by insufficient input validation. Multiple connected sources (CNVD/CNNVD/Red Hat/ CVE lists) confirm the same flaw and...

CVE-2022-32381

The CVE-2022-32381 entry concerns itsourcecode Advanced School Management System v1.0, which is vulnerable to SQL injection through /school/model/get_admin_profile.php?my_index=. The vulnerability is caused by lack of input validation for external SQL statements, enabling attackers to manipulate ...

CVE-2022-32381

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getadminprofile.php?myindex=...

CVE-2022-32433

CVE-2022-32433 affects itsourcecode Advanced School Management System v1.0. The vulnerability enables Arbitrary code execution via the endpoint ip/school/view/all_teacher.php. The CVE entry provides a basic impact assessment (CVSS v3.1: base score 7.2, HIGH) and indicates network-based access wit...

CVE-2022-32433

itsourcecode Advanced School Management System v1.0 is vulnerable to Arbitrary code execution via ip/school/view/allteacher.php...

Advanced School Management System SQL注入漏洞

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /gettimetable.php?id=The page lacks validation for external SQL statements, which cou...

itsourcecode Advanced School Management System SQL注入漏洞

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getgrade.php?id=The page lacks validation for external SQL statements, which could b...

Advanced School Management System SQL注入漏洞

Advanced School Management System is an open source PHP and MySQL based school management system. advanced School Management System is vulnerable to SQL injection in version v1.0, which can be exploited by attackers to launch SQL attacks against targets...

Advanced School Management System SQL注入漏洞

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getsubjectrouting.php?id=The page lacks validation for external input SQL statements...

Advanced School Management System SQL注入漏洞

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getexam.php?id=The page lacks validation for external input SQL statements, which ca...

itsourcecode Advanced School Management System SQL注入漏洞

Advanced School Management System, a school management system by Angel Jude Reyes Suarez, is a SQL injection vulnerability in version v1.0 of Advanced School Management System, which originates from /school/model/ getclassroom.php?id=The page lacks validation for external input SQL statements,...

Advanced School Management System SQL注入漏洞

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getexamtimetable.php?id=The page lacks validation for external input SQL statements,...

Advanced School Management System SQL注入漏洞

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getparentsprofile.php?myindex=The page lacks validation of externally entered SQL...

Car Driving School Management System SQL Injection Vulnerability (CNVD-2022-65320)

A SQL injection vulnerability exists in Car Driving School Management System, a driving school management system, which originates from /cdsms/classes/Master.php?f=delete package...