1311 matches found
PT-2024-30036 · Unknown · School Management System
Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: A SQL injection issue was discovered in the School Management System via the medium parameter at the "substaff.php" endpoint. This allows for potential exploitation. No...
CVE-2024-42566
CVE-2024-42566 affects the School Management System. A SQL injection flaw is present in the login.php endpoint, exploitable via the password parameter. Public sources note the vulnerability but do not provide confirmed affected versions or a fix. Impact is described as high/critical in CVE metada...
CVE-2024-42575
CVE-2024-42575 affects School Management System. A SQL injection flaw is present in the substaff.php endpoint, exploitable via the medium parameter. CVSS v3.1 metrics indicate a Base Score of 9.8 (CRITICAL) with Network attack vector, Low attack complexity, no privileges required, no user interac...
CVE-2024-42572
CVE-2024-42572 : A SQL injection vulnerability exists in the School Management System via the medium parameter on the endpoint unitmarks.php . Severity is CRITICAL (CVSS v3.1: 9.8) with impact to confidentiality, integrity, and availability. No remediation or fix versions are specified in the pro...
PT-2024-30029 · Unknown · School Management System
Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: The issue is related to a SQL injection vulnerability. It occurs via the medium parameter at the "paidclass.php" endpoint. There is no information provided about the...
PT-2024-30035 · Unknown · School Management System
Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: The issue is related to a SQL injection vulnerability. It can be exploited via the medium parameter at the "attendance.php" endpoint. There is no information provided about...
CVE-2024-42573
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at dtmarks.php...
CVE-2024-42567
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at /search.php?action=2...
CVE-2024-42571
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at insertattendance.php...
School-Management-System 安全漏洞
School-Management-System is a school management system by the individual developer Jyothi Babu Araja. A security vulnerability exists in School-Management-System due to an SQL injection vulnerability in the medium parameter of the dtmarks.php page...
PT-2024-30033 · Unknown · School Management System
Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: A SQL injection issue was discovered in the School Management System via the medium parameter at the "unitmarks.php" endpoint. This allows for potential exploitation. No...
CVE-2024-42566
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password parameter at login.php...
PT-2024-30032 · Unknown · School Management System
Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the medium parameter at the "insertattendance.php" endpoint. Recommendations:...
CVE-2024-42572
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at unitmarks.php...
CVE-2024-42569
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at paidclass.php...
CVE-2024-42568
CVE-2024-42568 affects the School Management System. The vulnerability is an SQL injection in the transport parameter of the vehicle.php endpoint. According to the records, the attack vector is network-based with no authentication or user interaction required, and the CVSS 3.1 vector is AV:N/AC:L...
CVE-2024-42574
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at attendance.php...
CVE-2024-42567
CVE-2024-42567 is a SQL injection vulnerability in the School Management System identified on commit bae5aa, exploitable via the sid parameter at /search.php?action=2. The issue affects the system with network-based access, no authentication/UI interaction required, and has a CVSS v3.1 base score...
School-Management-System 安全漏洞
School-Management-System is a school management system by the individual developer Jyothi Babu Araja. A security vulnerability exists in School-Management-System due to an SQL injection vulnerability in the transport parameter of the vehicle.php page...