PT-2022-21273

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /school/model/get subject routing.php endpoint, specifically through the id parameter. Recommendations...

PT-2022-21277

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "/school/model/get teacher profile.php" API endpoint, specifically through the my index variable. This allo...

PT-2022-21274

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue concerns SQL Injection via the /school/model/get timetable.php endpoint, specifically through the id parameter. This allows for potential unauthorized access to...

PT-2022-21278

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue allows for SQL Injection, which can be exploited via the "/school/model/get parents profile.php" API endpoint, specifically through the my index variable. This...

PT-2022-21271

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue concerns SQL Injection via the "/school/model/get subject.php?id=" endpoint. This allows for potential manipulation of database queries. No information is provide...

PT-2022-21267

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue concerns SQL Injection via the /school/model/get grade.php endpoint, specifically through the id parameter. This allows for potential unauthorized access and...

PT-2022-21276

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue concerns SQL Injection vulnerability. It can be exploited via the /school/model/get exam timetable.php endpoint, specifically through the id parameter...

CVE-2022-32370: Improper Neutralization of Special Elements used in an SQL Command

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getclassroom.php?id=...

CVE-2022-32371: Improper Neutralization of Special Elements used in an SQL Command

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getteacher.php?id=...

CVE-2022-32376: Improper Neutralization of Special Elements used in an SQL Command

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getevents.php?eventid=...

CVE-2022-32381: Improper Neutralization of Special Elements used in an SQL Command

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getadminprofile.php?myindex=...

CVE-2022-32375: Improper Neutralization of Special Elements used in an SQL Command

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/gettimetable.php?id=...

CVE-2022-32378: Improper Neutralization of Special Elements used in an SQL Command

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getteacherprofile.php?myindex=...

PT-2022-21280

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue allows for SQL Injection via the "/school/model/get admin profile.php" API endpoint, specifically through the my index variable. This could potentially lead to...

PT-2022-21272

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue is related to SQL Injection. It can be exploited via the "/school/model/get exam.php" API endpoint, specifically through the id variable. No information is provid...

PT-2022-21279

Name of the Vulnerable Software and Affected Versions itsourcecode Advanced School Management System version 1.0 Description The issue allows for SQL Injection via the "/school/model/get student subject.php?index=" API endpoint, specifically through the index parameter. This could potentially lea...

itsourcecode Advanced School Management System SQL注入漏洞

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getgrade.php?id=The page lacks validation for external SQL statements, which could b...

Advanced School Management System SQL注入漏洞

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getexam.php?id=The page lacks validation for external input SQL statements, which ca...

Advanced School Management System SQL注入漏洞

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getsubjectrouting.php?id=The page lacks validation for external input SQL statements...

itsourcecode Advanced School Management System SQL注入漏洞

Advanced School Management System, a school management system by Angel Jude Reyes Suarez, is a SQL injection vulnerability in version v1.0 of Advanced School Management System, which originates from /school/model/ getclassroom.php?id=The page lacks validation for external input SQL statements,...