14 matches found
EUVD-2026-31999
A weakness has been identified in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This impacts an unknown function of the file /index.php of the component SQL Handler. Executing a manipulation can lead to information exposure through error message. The attack may be...
CVE-2026-9582 SourceCodester CET Automated Grading System with AI Predictive Analytics cross-site request forgery
A security flaw has been discovered in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This affects an unknown function. Performing a manipulation results in cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been released ...
CVE-2026-9582
A security flaw has been discovered in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This affects an unknown function. Performing a manipulation results in cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been released ...
CVE-2026-7401
CVE-2026-7401 affects SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. The vulnerability targets the Registration component, specifically /index.php?action=register, where manipulation of the arguments student_id, full_name, section, or username enables cross-site scr...
EUVD-2019-8132
Malware in sbrugna...
CVE-2025-10408
A security flaw has been discovered in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionality of the file /edituser.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been release...
PT-2025-37441
Name of the Vulnerable Software and Affected Versions: SourceCodester Student Grading System version 1.0 Description: A SQL injection issue exists in SourceCodester Student Grading System 1.0. The issue affects an unknown part of the file /form137.php. Manipulation of the ID parameter can lead to...
SourceCodester Student Grading System SQL注入漏洞
SourceCodester Student Grading System is a SourceCodester open source student grading system. A SQL injection vulnerability exists in SourceCodester Student Grading System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /viewstudents.php, which could lead to a...
PT-2025-37442
Name of the Vulnerable Software and Affected Versions: SourceCodester Student Grading System version 1.0 Description: A flaw exists in the SourceCodester Student Grading System that may allow for SQL injection. The issue affects unknown code within the /update account.php file. Manipulation of th...
PT-2025-37428
Name of the Vulnerable Software and Affected Versions: SourceCodester Student Grading System version 1.0 Description: A security flaw exists in SourceCodester Student Grading System 1.0. The issue is related to SQL injection within the /edit user.php file. Manipulation of the ID parameter can...
SourceCodester Student Grading System SQL注入漏洞
SourceCodester Student Grading System is a SourceCodester open source student grading system. A SQL injection vulnerability exists in SourceCodester Student Grading System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /edituser.php, which could lead to a SQL...
CVE-2021-41658
Cross Site Scripting XSS in Sourcecodester Student Quarterly Grading System by oretnom23, allows attackers to execute arbitrary code via the fullname and username parameters to the users page...
Sourcecodester Online Grading System Cross-Site Request Forgery Vulnerability
Sourcecodester Online Grading System is a student information management system. The system provides functions such as student information management and online grading. A cross-site request forgery vulnerability exists in the Sourcecodester Online Grading System. An attacker could use this...
CVE-2019-18280
Sourcecodester Online Grading System 1.0 is affected by a Cross Site Request Forgery vulnerability due to a lack of CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code via a crafted HTML page, as demonstrated by a Create User action at the...