CVE-2024-42567

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at /search.php?action=2...

CVE-2024-42567

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at /search.php?action=2...

School-Management-System 安全漏洞

School-Management-System is a school management system by the individual developer Jyothi Babu Araja. School-Management-System has a security vulnerability that stems from an SQL injection vulnerability in the sid parameter of the /search.php?action=2 page...

PT-2024-30027 · Unknown · School Management System

Name of the Vulnerable Software and Affected Versions: School Management System version bae5aa Description: A SQL injection issue was discovered in the School Management System, allowing unauthorized data access and manipulation via the sid parameter at the "/search.php?action=2" endpoint. This...

CVE-2024-42567

School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the sid parameter at /search.php?action=2...

CVE-2024-42567

CVE-2024-42567 is a SQL injection vulnerability in the School Management System identified on commit bae5aa, exploitable via the sid parameter at /search.php?action=2. The issue affects the system with network-based access, no authentication/UI interaction required, and has a CVSS v3.1 base score...

CVE-2024-29640

An issue in aliyundrive-webdav v.2.3.3 and before allows a remote attacker to execute arbitrary code via a crafted payload to the sid parameter in the actionqueryqrcode component...

PT-2024-22945

Name of the Vulnerable Software and Affected Versions aliyundrive-webdav versions 2.3.3 and earlier Description An issue in aliyundrive-webdav allows a remote attacker to execute arbitrary code via a crafted payload to the sid parameter in the action query qrcode component. Recommendations For...

CVE-2024-29640

Affected software: aliyundrive-webdav (v2.3.3 and earlier). The issue stems from the sid parameter in the action_query_qrcode component, which can be exploited by a remote attacker to execute arbitrary code. Impact is described as Remote Code Execution with a CVSS v3.1 base score of 9.8 (NETWORK,...

aliyundrive-webdav 安全漏洞

aliyundrive-webdav is an aliyundrive WebDAV service from messense individual developers. A security vulnerability in aliyundrive-webdav v.2.3.3 and earlier versions exists that could allow a remote attacker to execute arbitrary code via the sid parameter in the actionqueryqrcode component using a...

CVE-2024-25314

Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'sid' parameter in Hotel/admin/show.php?sid=2...

Sql injection

Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'sid' parameter in Hotel/admin/show.php?sid=2...

Simple Student Attendance System SQL Injection Vulnerability

Simple Student Attendance System is a simple student attendance system. A SQL injection vulnerability exists in Simple Student Attendance System version 1.0, which stems from a parameter sid in the file actions.class.php that can lead to SQL injection...

CVE-2023-48929

Franklin Fueling Systems System Sentinel AnyWare SSA version 1.6.24.492 is vulnerable to Session Fixation. The 'sid' parameter in the groupstatus.asp resource allows an attacker to escalate privileges and obtain sensitive information...

CVE-2023-33706

SysAid before 23.2.15 allows Indirect Object Reference IDOR attacks to read ticket data via a modified sid parameter to EmailHtmlSourceIframe.jsp or a modified srID parameter to ShowMessage.jsp...

PT-2023-22524 · Unknown · Ningzichun Student Management System

Name of the Vulnerable Software and Affected Versions: ningzichun Student Management System version 1.0 Description: A critical issue affects some unknown functionality of the file resetPassword.php of the component Password Reset Handler. The manipulation of the sid argument leads to weak passwo...

CVE-2023-2955

A vulnerability, which was classified as critical, was found in SourceCodester Students Online Internship Timesheet System 1.0. Affected is an unknown function of the file renderedreport.php of the component GET Parameter Handler. The manipulation of the argument sid leads to sql injection. It is...

CVE-2023-1567

A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/assign/assign.php. The manipulation of the argument sid leads to cross site scripting. The attack may be...

Student Study Center Desk Management System 跨站脚本漏洞

Student Study Center Desk Management System is a student study center desk management system. A cross-site scripting vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which stems from a problem in the file /admin/assign/assign.php, where manipulation ...

PT-2023-17083 · Sourcecodester · Sourcecodester Student Study Center Desk Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Study Center Desk Management System version 1.0 Description: A problematic issue affects the processing of the file /admin/assign/assign.php, where the manipulation of the sid argument leads to cross-site scripting. The...