145 matches found
Exploit_Development
Proof-of-Concepts for my CVEs CVE-2022-3436 - Online Student Clearance System v1.0 - CVE-2022-3436.py...
CVE-2022-42235
A Stored XSS issue in Student Clearance System v.1.0 allows the injection of arbitrary JavaScript in the Student registration form...
EUVD-2025-201617
A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be...
CVE-2025-14206
CVE-2025-14206 affects SourceCodester Online Student Clearance System 1.0 in the Fee Table Handler, specifically /Admin/delete-fee.php. Manipulating the ID parameter can lead to improper authorization, with remote exploitation; public exploit details exist. Remediation guidance across connected s...
CVE-2025-14206: Improper Authorization
A vulnerability was determined in SourceCodester Online Student Clearance System 1.0. The affected element is an unknown function of the file /Admin/delete-fee.php of the component Fee Table Handler. Executing manipulation of the argument ID can lead to improper authorization. The attack may be...
PT-2025-49420
Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Clearance System version 1.0 Description A flaw exists in the system that could allow improper authorization. This issue stems from manipulating the ID argument within an unknown function of the file...
CVE-2025-13586
A flaw has been found in SourceCodester Online Student Clearance System 1.0. Impacted is an unknown function of the file /Admin/changepassword.php. This manipulation of the argument txtconfirmpassword causes sql injection. It is possible to initiate the attack remotely. The exploit has been...
PT-2025-47888
A flaw has been found in SourceCodester Online Student Clearance System 1.0. Impacted is an unknown function of the file /Admin/changepassword.php. This manipulation of the argument txtconfirm password causes sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-13586: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in SourceCodester Online Student Clearance System 1.0. Impacted is an unknown function of the file /Admin/changepassword.php. This manipulation of the argument txtconfirmpassword causes sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-60305
SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control. The application contains a logic flaw which allows low privilege users can forge high privileged sessions and perform sensitive operations...
CVE-2025-60305
SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control. The application contains a logic flaw which allows low privilege users can forge high privileged sessions and perform sensitive operations...
CVE-2025-60305
The SourceCodester Online Student Clearance System version 1.0 is vulnerable to Incorrect Access Control due to a logic flaw. This vulnerability allows users with low privileges to forge high-privileged sessions, enabling them to perform sensitive operations that should be restricted to authorize...
PT-2025-41574
Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Clearance System version 1.0 Description The application has a flaw in access control. This allows users with limited privileges to create sessions with higher privileges and perform actions that should be...
CVE-2025-60305: Improper Access Control
SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control. The application contains a logic flaw which allows low privilege users can forge high privileged sessions and perform sensitive operations...
EUVD-2022-46125
Malicious code in bioql PyPI...
EUVD-2025-14158
Malicious code in bioql PyPI...
EUVD-2022-45311
Malicious code in bioql PyPI...
EUVD-2022-42812
Malicious code in bioql PyPI...