CVE-2022-28412

Car Driving School Managment System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=deletepackage...

CVE-2022-28412

Car Driving School Management System v1.0 is affected by a SQL injection vulnerability in the file path /cdsms/classes/Master.php?f=delete_package. The CVE-2022-28412 entry and cross-referenced sources (NVD, Red Hat, CNVD/CNNVD, CVE list, etc.) consistently describe a SQLi issue originating from ...

CVE-2022-24572

Car Driving School Management System v1.0 contains a Cross Site Scripting (XSS) vulnerability in the User Enrollment Form Username Field. The weakness allows client‑side code execution when an admin views registered user details. Root cause cited in sources is inadequate input filtering/validatio...

CVE-2021-24575

The School Management System – WPSchoolPress WordPress plugin before 2.1.10 does not properly sanitize or use prepared statements before using POST variable in SQL queries, leading to SQL injection in multiple actions available to various authenticated users, from simple subscribers/students to...

CVE-2021-24664

The School Management System – WPSchoolPress WordPress plugin before 2.1.17 sanitise some fields using sanitizetextfield but does not escape them before outputting in attributes, resulting in Stored Cross-Site Scripting issues...

CVE-2021-24664

The School Management System – WPSchoolPress WordPress plugin before 2.1.17 sanitise some fields using sanitizetextfield but does not escape them before outputting in attributes, resulting in Stored Cross-Site Scripting issues...

CVE-2021-24664

The School Management System – WPSchoolPress WordPress plugin before 2.1.17 sanitise some fields using sanitizetextfield but does not escape them before outputting in attributes, resulting in Stored Cross-Site Scripting issues...

CVE-2021-24664

CVE-2021-24664: The WordPress plugin WPSchoolPress (School Management System) versions before 2.1.17 are vulnerable to Stored Cross-Site Scripting. The root cause is insufficient escaping of data output in attributes after sanitise_text_field() processing. Exploitable in the WordPress admin conte...

CVE-2021-24575

The CVE-2021-24575 entry concerns the WordPress plugin WPSchoolPress (School Management System) prior to version 2.1.10. The root cause is insufficient sanitization and the lack of prepared statements when processing POST data in SQL queries, enabling SQL injection in multiple actions accessible ...

File Upload Vulnerability in School Training and Teaching Management System of Nanjing Suwen Software Technology Co.

Nanjing Suwen Software Technology Co., Ltd. was formerly known as the software studio established in 2001 in Gulou District, Nanjing, 2002, the studio began to involve in the performance management system, course selection management system, faculty management system development and design, in...

CVE-2021-30114

Web-School ERP V 5.0 contains a cross-site request forgery CSRF vulnerability that allows a remote attacker to create a voucher payment request through module/accounting/voucher/create. The application fails to validate the CSRF token for a POST request using admin privilege...

Multi Branch School Management System 3.5 - _Create Branch_ Stored XSS

Exploit Title: Multi Branch School Management System 3.5 - "Create Branch" Stored XSS Exploit Author: Kislay Kumar Date: 2020-12-21 Google Dork: N/A Vendor Homepage: https://www.ramomcoder.com/ Software Link: https://codecanyon.net/item/ramom-multi-branch-school-management-system/25182324 Affecte...

Multi Branch School Management System 3.5 Cross Site Scripting

Exploit Title: Multi Branch School Management System 3.5 - "Create Branch" Stored XSS Exploit Author: Kislay Kumar Date: 2020-12-21 Google Dork: N/A Vendor Homepage: https://www.ramomcoder.com/ Software Link: https://codecanyon.net/item/ramom-multi-branch-school-management-system/25182324 Affecte...

OS4Ed openSIS login SQL injection vulnerability

Summary An exploitable SQL injection vulnerability exists in the login functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can send an HTTP request to trigger this vulnerability. Tested Versions OS4Ed openSIS 7.3 Product URLs...

OS4Ed openSIS CheckDuplicateStudent.php page SQL injection vulnerability

Talos Vulnerability Report TALOS-2020-1072 OS4Ed openSIS CheckDuplicateStudent.php page SQL injection vulnerability August 31, 2020 CVE Number CVE-2020-6117,CVE-2020-6119,CVE-2020-6121,CVE-2020-6118,CVE-2020-6120,CVE-2020-6122 SUMMARY Multiple exploitable SQL injection vulnerabilities exist in th...

Sichuan Zhongwang Shengteng Technology Co., Ltd. school management system has logic flaws and vulnerabilities

The Academic Management System AMS is a management system that displays departmental information for the school and publishes relevant notices and announcements and school news. There is a logic flaw vulnerability in the system that can be exploited by an attacker to gain administrator privileges...

ALLE INFORMATION School Manage System Code Issue Vulnerability

ALLE INFORMATION School Management System is a school management system from ALLE INFORMATION in Taiwan, China. A code issue vulnerability exists in ALLE INFORMATION School Manage System prior to version 2020, which stems from a misconfiguration of the file upload filter. The vulnerability can be...

ALLE INFORMATION School Manage System SQL Injection Vulnerability

ALLE INFORMATION School Management System is a school management system from ALLE INFORMATION in Taiwan, China. A SQL injection vulnerability exists in versions of ALLE INFORMATION School Manage System prior to 2020. The vulnerability can be exploited to obtain the database schema and...

CVE-2020-10506

The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Path Traversal, allowing attackers to access arbitrary files...

SchoolCMS Arbitrary PHP Code Execution Vulnerability

SchoolCMS is an open source school teaching management system based on ThinkPHP framework. The system includes student management , grade management and teacher management . A security vulnerability exists in SchoolCMS version 2.3.1. An attacker can exploit this vulnerability to execute arbitrary...