CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

180 matches found

Kitploit•added 2026/09/22 11:37 a.m.•14 views

CVE-2023-51801

CVE-2023-51801 Simple Student Attendance System v.1.0 - 多个SQL注入漏洞 - studentform.php 和 classform.php 描述：Simple Student Attendance System v.1.0 存在多个SQL注入漏洞，可被认证攻击者利用。这些漏洞存在于 studentform.php 和 classform.php 中，允许通过 'id' 参数执行任意SQL命令。受影响产品版本：Simple Student Attendance System v.1.0 CVE作者：Geraldo...

9.8CVSS6.1AI score0.01182EPSS

SaveExploits2

Kitploit•added 2026/09/22 4:13 a.m.•13 views

CVE-2023-51802

CVE-2023-51802 Simple Student Attendance System v.1.0 - attendancereport 中的跨站脚本 XSS 漏洞描述 : Simple Student Attendance System v.1.0 中的跨站脚本漏洞允许远程攻击者通过向 attendancereport 组件的 "page" 或 "classmonth" 参数传递精心构造的负载来执行任意代码。受影响产品版本 : Simple Student Attendance System v.1.0 CVE 作者 : Geraldo Alcântara 日期 :...

6.1CVSS6.8AI score0.00615EPSS

SaveExploits1

Vulnrichment•added 2026/06/13 10:45 p.m.•18 views

CVE-2026-12175 CodeAstro Student Attendance Management System createStudents.php sql injection

A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is...

5.8CVSS5.1AI score0.00214EPSS

SaveExploits0References6

CVE•added 2026/06/13 10:45 p.m.•55 views

CVE-2026-12175

CodeAstro Student Attendance Management System 1.0 is affected. The vulnerability resides in /attendance-php/Admin/createStudents.php where manipulating the admissionNumber parameter enables an SQL injection. It supports remote exploitation and the exploit is public. No remediation or patch detai...

5.8CVSS5.3AI score0.00214EPSS

SaveExploits0References6

RedhatCVE•added 2026/06/09 8:59 p.m.•19 views

CVE-2026-11583

A vulnerability has been found in CodeAstro Student Attendance Management System 1.0. This affects an unknown function of the file /attendance-php/Admin/createClass.php. The manipulation of the argument className leads to sql injection. It is possible to initiate the attack remotely. The exploit...

6.5CVSS6.5AI score0.00204EPSS

SaveExploits0References1

Positive Technologies•added 2026/06/08 12:00 a.m.•22 views

PT-2026-47445

Name of the Vulnerable Software and Affected Versions CodeAstro Student Attendance Management System version 1.0 Description SQL injection is possible via remote attack due to the manipulation of the ID argument in the '/attendance-php/Admin/createClass.php?action=edit' endpoint. This issue affec...

6.5CVSS6.6AI score0.00204EPSS

SaveExploits0References9