1642 matches found
CVE-2024-42566
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password parameter at login.php...
CVE-2024-42567
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at /search.php?action=2...
CVE-2024-42574
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at attendance.php...
CVE-2024-42568
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the transport parameter at vehicle.php...
PT-2024-30028 · Unknown · School Management System
Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: A SQL injection issue was discovered in the School Management System, specifically via the transport parameter at the "vehicle.php" endpoint. This allows for potential...
CVE-2024-42571
The School Management System (specifically commit bae5aa ) contains a SQL injection vulnerability. The flaw exists in the medium parameter at the insertattendance.php endpoint. Exploitation of this vulnerability could lead to unauthorized database access or manipulation. No specific fix or newer ...
PT-2024-30029 · Unknown · School Management System
Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: The issue is related to a SQL injection vulnerability. It occurs via the medium parameter at the "paidclass.php" endpoint. There is no information provided about the...
CVE-2024-42567
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at /search.php?action=2...
School-Management-System 安全漏洞
School-Management-System is a school management system by the individual developer Jyothi Babu Araja. A security vulnerability exists in School-Management-System due to an SQL injection vulnerability in the medium parameter of the substaff.php page...
CVE-2024-42574
CVE-2024-42574 affects School Management System (commit bae5aa) with a SQL injection vulnerability exposed via the medium parameter in attendance.php. The vulnerability is described as affecting the server-side query logic, enabling potential disclosure, modification, or tampering of data (confid...
CVE-2024-42573
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at dtmarks.php...
CVE-2024-42575
CVE-2024-42575 affects School Management System. A SQL injection flaw is present in the substaff.php endpoint, exploitable via the medium parameter. CVSS v3.1 metrics indicate a Base Score of 9.8 (CRITICAL) with Network attack vector, Low attack complexity, no privileges required, no user interac...
CVE-2024-42575
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at substaff.php...
PT-2024-30032 · Unknown · School Management System
Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the medium parameter at the "insertattendance.php" endpoint. Recommendations:...
CVE-2024-42574
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at attendance.php...
PT-2024-30031 · Unknown · School Management System
Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: A SQL injection issue was found in the School Management System via the medium parameter at the "admininsert.php" endpoint. This allows for potential exploitation. No...
CVE-2024-42568
CVE-2024-42568 affects the School Management System. The vulnerability is an SQL injection in the transport parameter of the vehicle.php endpoint. According to the records, the attack vector is network-based with no authentication or user interaction required, and the CVSS 3.1 vector is AV:N/AC:L...
CVE-2024-42573
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at dtmarks.php...
CVE-2024-42570
CVE-2024-42570 affects School Management System with a SQL injection in the admininsert.php endpoint exposed via the medium parameter. Multiple connected sources confirm the issue, including NVD/Red Hat/CVE records and third-party advisories, consistently identifying the vulnerability as a SQL in...