CVE-2020-29214

CVE-2020-29214 affects SourceCodester’s Alumni Management System 1.0. The vulnerability is a SQL injection in admin/login.php caused by unsanitized input, enabling unauthenticated attackers to bypass login and gain access to administrative data. Documented impact includes authentication bypass wi...

CVE-2020-29214

SQL injection vulnerability in SourceCodester Alumni Management System 1.0 allows the user to inject SQL payload to bypass the authentication via admin/login.php...

SourceCodester Alumni Management System SQL注入漏洞

Sourcecodester Alumni Management System is a Php, Mysql based alumni management system from Sourcecodester, Inc. SourceCodester Alumni Management System 1.0 suffers from a SQL injection vulnerability that can be exploited by an attacker to bypass authentication by injecting a SQL load via...

Cross site scripting

SourceCodester Alumni Management System 1.0 is affected by cross-site Scripting XSS in /admin/gallery.php. After the admin authentication an attacker can upload an image in the gallery using a XSS payload in the description textarea called 'about' and reach a stored XSS...

CVE-2020-28071

SourceCodester Alumni Management System 1.0 is affected by cross-site Scripting XSS in /admin/gallery.php. After the admin authentication an attacker can upload an image in the gallery using a XSS payload in the description textarea called 'about' and reach a stored XSS...