CVE-2023-41616

A reflected cross-site scripting XSS vulnerability in the Search Student function of Student Management System v1.2.3 and before allows attackers to execute arbitrary Javascript in the context of a victim user's browser via a crafted payload...

Student Management System Cross-Site Scripting Vulnerability

Student Management System is a simple web-based student management software from the individual developer Sk. Amir Hamza of Bangladesh. A cross-site scripting vulnerability exists in Student Management System v1.2.3 that could allow an attacker to execute arbitrary Javascript in the victim user's...

CVE-2023-41616

A reflected cross-site scripting XSS vulnerability in the Search Student function of Student Management System v1.2.3 and before allows attackers to execute arbitrary Javascript in the context of a victim user's browser via a crafted payload...

CVE-2023-41616

A reflected cross-site scripting XSS vulnerability in the Search Student function of Student Management System v1.2.3 and before allows attackers to execute arbitrary Javascript in the context of a victim user's browser via a crafted payload...

CVE-2023-41616

CVE-2023-41616 affects Student Management System (SMS) v1.2.3 and earlier, with a reflected XSS in the Search Student function that allows arbitrary Javascript execution in a victim’s browser via a crafted payload. Documents confirm the affected component and vulnerability type; PT-2023-28001 pro...

CVE-2023-41616: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in the Search Student function of Student Management System v1.2.3 and before allows attackers to execute arbitrary Javascript in the context of a victim user's browser via a crafted payload...

PT-2023-28001 · Unknown · Student Management System

Name of the Vulnerable Software and Affected Versions: Student Management System versions 1.2.3 and earlier Description: A reflected cross-site scripting XSS vulnerability in the Search Student function allows attackers to execute arbitrary Javascript in the context of a victim user's browser via...

CVE-2023-3008

A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument user/pass leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

CVE-2023-3007

A vulnerability was found in ningzichun Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file resetPassword.php of the component Password Reset Handler. The manipulation of the argument sid leads to weak password recovery. T...

CVE-2023-3008

A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument user/pass leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

CVE-2023-3007

A vulnerability was found in ningzichun Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file resetPassword.php of the component Password Reset Handler. The manipulation of the argument sid leads to weak password recovery. T...

Sql injection

A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument user/pass leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

Design/Logic Flaw

A vulnerability was found in ningzichun Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file resetPassword.php of the component Password Reset Handler. The manipulation of the argument sid leads to weak password recovery. T...

CVE-2023-3008 ningzichun Student Management System login.php sql injection

A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument user/pass leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

CVE-2023-3008

CVE-2023-3008 affects ningzichun Student Management System 1.0, specifically the login.php file. The vulnerability is a SQL injection caused by manipulation of the user/pass parameter, exploitable remotely, with public disclosures of exploits. Multiple sources in the connected set confirm the sam...

CVE-2023-3007

The CVE-2023-3007 entry concerns ningzichun Student Management System 1.0. The vulnerability affects the Password Reset Handler’s resetPassword.php, where manipulating the sid parameter leads to weak password recovery. A remote attacker could exploit this, and public disclosure has occurred. Docu...

CVE-2023-3007 ningzichun Student Management System Password Reset resetPassword.php password recovery

A vulnerability was found in ningzichun Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file resetPassword.php of the component Password Reset Handler. The manipulation of the argument sid leads to weak password recovery. T...

Student Management System 授权问题漏洞

Student Management System is a simple web-based student management software from Sk.Amir Hamza, an individual developer in Bangladesh. An authorization issue vulnerability exists in Student Management System version 1.0, which stems from an incorrect manipulation of the parameter sid that can lea...

Student Management System SQL注入漏洞

Student Management System is a simple web-based student management software by the individual developer of Sk.Amir Hamza, Bangladesh. A SQL injection vulnerability exists in version 1.0 of the ningzichun Student Management System, which stems from an incorrect manipulation of the parameter...

PT-2023-22527 · Unknown · Ningzichun Student Management System

Name of the Vulnerable Software and Affected Versions: ningzichun Student Management System version 1.0 Description: A critical issue has been found in the ningzichun Student Management System, affecting the file login.php. The manipulation of the user/pass argument leads to SQL injection. This...