CVE-2025-10613: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /leveledit1.php. Such manipulation of the argument levelid leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the...

CVE-2023-5930

A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/students/manageacademic.php. The manipulation of the argument studentid leads to cross site scripting. The attack can be...

Sql injection

A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/students/manageacademic.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public a...

CVE-2023-5924

The CVE-2023-5924 entry refers to Campcodes Simple Student Information System 1.0 with a SQL injection in /admin/courses/view_course.php via the id parameter. Public exploit details exist. CVSSv3.1 base score 7.5 (HIGH) with Network attack, no user interaction, and HIGH confidentiality impact but...

CVE-2023-5923

CVE-2023-5923 — Campcodes Simple Student Information System 1.0 is affected by a SQL injection in an unknown part of /admin/index.php, triggered by manipulating the id parameter. The vuln is described as critical and is accompanied by public disclosure of exploits. The available connected sources...

Cross site scripting

A vulnerability, which was classified as problematic, was found in Student Information System 1.0. Affected is admin/?page=students of the Student Roll module. The manipulation with the input alert1 leads to authenticated cross site scripting. Exploit details have been disclosed to the public...