CVE-2022-32380

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getstudentsubject.php?index=...

CVE-2022-32381

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getadminprofile.php?myindex=...

CVE-2022-32375

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/gettimetable.php?id=...

CVE-2022-32378

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getteacherprofile.php?myindex=...

CVE-2022-32371

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getteacher.php?id=...

CVE-2022-32368

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getgrade.php?id=...

CVE-2022-32370

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getclassroom.php?id=...

CVE-2022-32433

itsourcecode Advanced School Management System v1.0 is vulnerable to Arbitrary code execution via ip/school/view/allteacher.php...

CVE-2022-30886

School Dormitory Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /dms/admin/reports/dailycollectionreport.php...

CVE-2022-28412

Car Driving School Managment System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=deletepackage...

CVE-2022-28413

Car Driving School Management System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=deleteenrollment...

CVE-2022-32372

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getsubject.php?id=...

CVE-2022-32376

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getevents.php?eventid=...

CVE-2022-32374

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getsubjectrouting.php?id=...

CVE-2022-32373

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getexam.php?id=...

CVE-2022-34580

Advanced School Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the address parameter at ip/school/index.php...

CVE-2025-48372 Schule Has Insecure OTP Length, is Susceptible to Brute-Force Attacks

Schule is open-source school management system software. The generateOTP function generates a 4-digit numeric One-Time Password OTP. Prior to version 1.0.1, even if a secure random number generator is used, the short length and limited range 1000–9999 results in only 9000 possible combinations...

Arbitrary File Read Vulnerability in Smart School Management System of Beijing Software Branch of KDDI (Beijing) Co.

Ltd. focuses on the research and development of core artificial intelligence technology and industrialization landing. An arbitrary file read vulnerability exists in the Smart School Management System of Beijing Software Branch of KDDI Beijing Limited, which can be exploited by attackers to obtai...

CVE-2025-1669

The School Management System – WPSchoolPress plugin for WordPress is vulnerable to SQL Injection via the 'addNotify' action in all versions up to, and including, 2.2.17 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

CVE-2024-12611

The School Management System for Wordpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'title' parameter in all versions up to, and including, 93.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers t...