727 matches found
Cross site scripting
A stored cross-site scripting XSS vulnerability in /navbaraction.php of Student Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat box...
CVE-2021-33371
CVE-2021-33371 is a stored XSS in Student Management System v1.0 caused by unsanitized input in /nav_bar_action.php (Chat box). Multiple connected sources confirm the vulnerable endpoint and payload injection as the attack vector, leading to execution of arbitrary client-side scripts. Affected so...
Student Management System 跨站脚本漏洞
Student Management System is a simple web-based student management software by the individual developer of Sk.Amir Hamza, Bangladesh. A security vulnerability exists in Student Management System version v1.0, which originates in navbaraction.php and allows attackers to execute arbitrary web scrip...
PT-2022-10231 · Unknown · Student Management System
Name of the Vulnerable Software and Affected Versions: Student Management System version 1.0 Description: A stored cross-site scripting XSS issue in the "/nav bar action.php" API endpoint allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat box...
Student Management System 1.0 - SQLi Authentication Bypass
Exploit Title: Student Management System 1.0 - SQLi Authentication Bypass Date: 2020-07-06 Exploit Author: Enes Özeser Vendor Homepage: https://www.sourcecodester.com/php/14268/student-management-system.html Version: 1.0 Tested on: Windows & WampServer CVE: CVE-2020-23935 1- Go to following url...
Unauthorized Access Vulnerability in the Intelligent Management System for Innovative Training for Prefectural Students
Pioneer's Great Student Innovation Training Intelligent Management System is a set of management system that runs through the whole set of operation process of college students' innovation training program. An unauthorized access vulnerability exists in the system, which can be exploited by...
Information leakage vulnerability in the student work management information system of Zhengfang Software Co.(CNVD-2021-12847)
Ltd. is a software enterprise and high-tech enterprise specializing in consulting, planning, construction and service in the field of university education informatization. There is an information leakage vulnerability in the student work management information system of Zhengfang Software Co., Lt...
CVE-2020-25955
SourceCodester Student Management System Project in PHP version 1.0 is vulnerable to stored a cross-site scripting XSS via the 'add subject' tab...
CVE-2020-25955
SourceCodester Student Management System Project in PHP version 1.0 is vulnerable to stored a cross-site scripting XSS via the 'add subject' tab...
CVE-2020-25955
Affected software: SourceCodester Student Management System Project in PHP version 1.0. The CVE-2020-25955 entry describes a stored XSS vulnerability exploitable through the add subject tab. Root cause: input entered via the tab is stored and subsequently reflected, enabling script execution. Imp...
CVE-2020-25955
SourceCodester Student Management System Project in PHP version 1.0 is vulnerable to stored a cross-site scripting XSS via the 'add subject' tab...
Student Management System Project PHP 1.0 Cross Site Scripting
For CVE-2020-25955: Exploit Title: student management system project PHP - Stored cross-site scripting Exploit Author: Krishna Yadav Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/14443/student-management-system-project-php.html Version: 1.0 Test...
PT-2020-16256 · Sourcecodester · Sourcecodester Student Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Student Management System Project in PHP version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited via the 'add subject' tab, allowing for stored XSS attacks...
SourceCodester Student Management System Project Cross-Site Scripting Vulnerability
SourceCodester Student Management System is a set of online student management system from SourceCodester, Inc. in the United States. The system provides student information management, announcement management, course management and other functions. A cross-site scripting vulnerability exists in...
Student Management System Authentication Bypass Vulnerability
Student Management System is an online student management system that helps schools manage and track information about each student. An authentication bypass vulnerability exists in Student Management System 1.0. The vulnerability can be exploited to bypass authentication via "Username: admin' &&...
CVE-2020-23935
Kabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin' && Password: Write Something"...
CVE-2020-23935
Kabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin' && Password: Write Something"...
Authentication flaw
Kabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin' && Password: Write Something"...
CVE-2020-23935
CVE-2020-23935 affects Kabir Alhasan Student Management System 1.0. An authentication bypass is possible via a crafted login payload, e.g., Username: admin'# and any Password, allowing bypass of the login check through the admin path (process.php). Multiple sources corroborate an SQLi- or bypass-...