107 matches found
CVE-2024-7166: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been classified as critical. Affected is an unknown function of the file /receipt.php. The manipulation of the argument efid leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...
CVE-2024-7165: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester School Fees Payment System 1.0 and classified as critical. This issue affects some unknown processing of the file /viewpayment.php. The manipulation of the argument efid leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2024-7167: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /managecourse.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely...
CVE-2024-7168: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester School Fees Payment System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /manageuser.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit...
CVE-2024-7169: Cross-Site Request Forgery (CSRF)
A vulnerability classified as problematic has been found in SourceCodester School Fees Payment System 1.0. This affects an unknown part of the file /ajax.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to th...
SourceCodester School Fees Payment System SQL注入漏洞
SourceCodester School Fees Payment System is a school fees payment system. A SQL injection vulnerability exists in version 1.0 of the SourceCodester School Fees Payment System, which stems from an SQL injection vulnerability in the id parameter of the /managecourse.php file...
CVE-2024-7164: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester School Fees Payment System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The explo...
PT-2024-38129 · Unknown · Sourcecodester School Fees Payment System
Name of the Vulnerable Software and Affected Versions: SourceCodester School Fees Payment System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /manage course.php. The manipulation of the id argument leads to sql injection...
CVE-2024-5378 SourceCodester School Intramurals Student Attendance Management System manage_sy.php sql injection
A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /managesy.php. The manipulation of the argument id leads to sql injection. The attack can be initiated...
CVE-2024-5378: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /managesy.php. The manipulation of the argument id leads to sql injection. The attack can be initiated...
CVE-2024-4926
A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /intramssams/managestudent.php. The manipulation of the argument id leads to sql injection. It is possible to...
CVE-2024-4926
A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /intramssams/managestudent.php. The manipulation of the argument id leads to sql injection. It is possible to...
CVE-2024-4926
CVE-2024-4926 affects SourceCodester School Intramurals Student Attendance Management System 1.0. The vulnerability is an SQL injection in an unknown function of the file /intrams_sams/manage_student.php triggered by manipulating the id parameter, with remote exploit feasibility. Public disclosur...
CVE-2024-4925
CVE-2024-4925 affects SourceCodester School Intramurals Student Attendance Management System v1.0. The vulnerability is in the handling of the file /intrams_sams/manage_course.php, where manipulation of the id parameter enables SQL injection. The issue can be exploited remotely, and public exploi...
CVE-2024-4925: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /intramssams/managecourse.php. The manipulation of the argument id leads to sql injection. The attack may be...
CVE-2024-4926: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /intramssams/managestudent.php. The manipulation of the argument id leads to sql injection. It is possible to...
CVE-2024-28276
Sourcecodester School Task Manager 1.0 is vulnerable to Cross Site Scripting XSS via add-task.php?taskname=...
CVE-2024-28276: Improper Neutralization of Input During Web Page Generation
Sourcecodester School Task Manager 1.0 is vulnerable to Cross Site Scripting XSS via add-task.php?taskname=...
CVE-2024-28277: Improper Neutralization of Input During Web Page Generation
In Sourcecodester School Task Manager v1.0, a vulnerability was identified within the subjectname= parameter, enabling Stored Cross-Site Scripting XSS attacks. This vulnerability allows attackers to manipulate the subject's name, potentially leading to the execution of malicious JavaScript payloa...
