CVE-2022-32373: Improper Neutralization of Special Elements used in an SQL Command

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getexam.php?id=...

Advanced School Management System SQL注入漏洞

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getparentsprofile.php?myindex=The page lacks validation of externally entered SQL...

Advanced School Management System SQL注入漏洞

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getexamtimetable.php?id=The page lacks validation for external input SQL statements,...

CVE-2022-32381: Improper Neutralization of Special Elements used in an SQL Command

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getadminprofile.php?myindex=...

Advanced School Management System SQL注入漏洞

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getexam.php?id=The page lacks validation for external input SQL statements, which ca...

CVE-2022-32374: Improper Neutralization of Special Elements used in an SQL Command

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getsubjectrouting.php?id=...

CVE-2022-32371: Improper Neutralization of Special Elements used in an SQL Command

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getteacher.php?id=...

itsourcecode Advanced School Management System SQL注入漏洞

Advanced School Management System, a school management system by Angel Jude Reyes Suarez, is a SQL injection vulnerability in version v1.0 of Advanced School Management System, which originates from /school/model/ getclassroom.php?id=The page lacks validation for external input SQL statements,...

Car Driving School Management System SQL Injection Vulnerability (CNVD-2022-65320)

A SQL injection vulnerability exists in Car Driving School Management System, a driving school management system, which originates from /cdsms/classes/Master.php?f=delete package...

CVE-2022-28412

Car Driving School Managment System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=deletepackage...

CVE-2022-28412

Car Driving School Management System v1.0 is affected by a SQL injection vulnerability in the file path /cdsms/classes/Master.php?f=delete_package. The CVE-2022-28412 entry and cross-referenced sources (NVD, Red Hat, CNVD/CNNVD, CVE list, etc.) consistently describe a SQLi issue originating from ...

CVE-2022-28413: Improper Neutralization of Special Elements used in an SQL Command

Car Driving School Management System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=deleteenrollment...

CVE-2022-24572

Car Driving School Management System v1.0 contains a Cross Site Scripting (XSS) vulnerability in the User Enrollment Form Username Field. The weakness allows client‑side code execution when an admin views registered user details. Root cause cited in sources is inadequate input filtering/validatio...

CVE-2022-24572: Improper Neutralization of Input During Web Page Generation

Car Driving School Management System v1.0 is affected by Cross Site Scripting XSS in the User Enrollment Form Username Field. To exploit this Vulnerability, an admin views the registered user details...

CVE-2022-24571: Improper Neutralization of Special Elements used in an SQL Command

Car Driving School Management System v1.0 is affected by SQL injection in the login page. An attacker can use simple SQL login injection payload to get admin access...

CVE-2021-24575

The School Management System – WPSchoolPress WordPress plugin before 2.1.10 does not properly sanitize or use prepared statements before using POST variable in SQL queries, leading to SQL injection in multiple actions available to various authenticated users, from simple subscribers/students to...

CVE-2021-24664

The School Management System – WPSchoolPress WordPress plugin before 2.1.17 sanitise some fields using sanitizetextfield but does not escape them before outputting in attributes, resulting in Stored Cross-Site Scripting issues...

CVE-2021-24664

The School Management System – WPSchoolPress WordPress plugin before 2.1.17 sanitise some fields using sanitizetextfield but does not escape them before outputting in attributes, resulting in Stored Cross-Site Scripting issues...

CVE-2021-24664

The School Management System – WPSchoolPress WordPress plugin before 2.1.17 sanitise some fields using sanitizetextfield but does not escape them before outputting in attributes, resulting in Stored Cross-Site Scripting issues...

CVE-2021-24664

CVE-2021-24664: The WordPress plugin WPSchoolPress (School Management System) versions before 2.1.17 are vulnerable to Stored Cross-Site Scripting. The root cause is insufficient escaping of data output in attributes after sanitise_text_field() processing. Exploitable in the WordPress admin conte...